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PREFACE 


This manual presents those aspects of the IBM 9020E Dis- 
play Channel Processor (DCP) which can be understood 
only in terms of the total system and its environment. It is 
intended for use by both students and trained mainte- . 
nance personnel. The manual is divided into nine chapters 
as follows: 

Chapter 1, Introduction, provides an overview of the 
9020E System in terms of the tasks it must perform and , 
the requirements it must meet. 

Chapter 2, System Description, provides a brief descrip- 
tion of each element and unit in the system. 

Chapter 3, Interface Lines, describes the interfacing be- 
tween system elements/units and defines each interface 

line. : 
Chapter 4, Configuration Control, explains the hardware 
and software implementation provided for the dynamic 
control of system configuration. 

Chapter 5, Storage Addressing, describes the storage- 
addressing scheme and the address-translation capability of 
the 9020E System. 

Chapter 6, Multisystem Operation, describes those sys- 
tem capabilities which are involved in operation of the 
system with more than one active computing element. 
These capabilities include: direct control, interrupts, 
shared storage, and reconfiguration. 

Chapter 7, System Monitoring, describes the hardware 
facilities which permit the program to monitor system 
operation for malfunctions and abnormal conditions. 


First Edition (July, 1970) 


Chapter 8, Malfunction Handling, dascribes error record- 
ing, logout, and the manner in which eath individual ele- 
ment/unit responds to malfunctions and abnormal condi- 
tions. 

Chapter 9, System Initialization, describes resets, initial 
program load (IPL), and restarting operation from the 
system standpoint. 

Two appendices are also provided. Appendix A, Com- 
parative Instruction Listing, shows the valid op codes for 
the CE (in 360 mode and normal 9020 mode) and for the 
IOCE (in IOCE-processor mode and normal mode). Appen- 
dix B, System/360 Mode of Operation, describes the dif- 
ferences in system operation resulting from operation in the 
360 mode. 

The following manuals are to be used in conjunction with 
this introduction manual: 


General 

A27-2734 9020D/E Principles of Operation, SRL 

SFN-0105 9020D/E Power Controls and Distribution, 
FETOM 

SY22-2799 Solid Logic Technology Power Supplies, 
FEMI 

SY22-2800 Solid Logic Technology Packaging, FETOM 

SY22-2798 Solid Logic Technology Component Circuits, 


FEMI 
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7201-02 Computing Element 


SFN-0201 7201-02 Computing Element, FETOM 
SFN-0202 7201-02 Computing Element, FEMDM 
SFN-0203 7201-02 Computing Element,, FEMM 


7231-02 I/O Control Element 


ZZ22-2865 7231-02 I/O Control Element, FETOM 

Y22-2866 7231-02 1/O Control Element, Control Panel, 
FETOM 

Z22-2867 7231-02 I/O Control Element, FEMDM 

ZZ22-6823 7231-02 I/O Control Element, FEMM 


(See 7231-02 FETOM preface for additional references.) 


7251-09 Storage Element 


SFN-0301 7251-09 Storage Element, FETOM 
SFN-0302 7251-09 Storage Element, FEMDM 
SFN-0303 7251-09 Storage Element, FEMM 


7289-04 Display Element 


SFN-0401 7289-04 Display Element, FETOM 
SFN-0402 7289-04 Display Element, FEMDM 
SFEN-0403 7289-04 Display Element, FEMM 


7265-03 Configuration Console 


SFN-0501 7265-03 Configuration Console, FETOM 
SFN-0502 7265-03 Configuration Console, FEMDM 
SFN-0503 7265-03 Configuration Console, FEMM 


2701-01 Data Adapter Unit 


SFN-0901 2701-01 Data Adapter Unit, FETMM 

SFN-0902 2701-01 Data Adapter Unit, FEMDM 

Channels 

SY22-2826  System/360 Model 50, Selector Channel, 
Common Channel, FETOM 

SY22-2827 System/360 Model 50, Multiplexer Channel, 


FETOM 


Channel-to-Channel Adapter 


Y22-6806 Channel-to-Channel Adapter, Model 6006A, 
FETMM 

Y 22-6807 Channel-to-Channel Adapter, Model 6006A, 
FEMDM 


2803A (SLT) Tape Control Unit 


SY32-5001 2803A Tape Control Unit, FETOM 
SY32-6002 2803A Tape Control Unit, FEMM 
Y¥22-6781 2803, 2803A Tape Controls for 9020 


System, FETOM 


Magnetic Tape Units 


SY22-2819 Magnetic Tape Units 2401, 2402, 2403 
Models 1—6; 2404 Models 1—3; FETOM 

SY22-2854 2401-2402, 2403 Models 1—3 Magnetic Tape 
Unit; 2403 Models 1—3 and 2803 Model 1 
Tape Control; FEMDM 

SY22-6631 Magnetic Tape Units 2401, 2402, 2403 
Models 1-3; FEMM 

1052 Adapter 


(Refer to 7201-02 Computing Element, FETOM, Appen- 
dix C.) 


1052 Printer/Keyboard 


§225-3179 1052 Printer/Keyboard and 1053 Printer, 
FETMM 
Selectric@ I/O Keyboardless Printer, FETOM 


Selectrice I/O Keyboardless Printer, FEMM 


S225-3353 
S225-3207 


2821 Integrated Control Unit 


SY 24-3359 2821 Integrated Control Unit, FETOM 
SY24-3503 2821 Integrated Control Unit, FEMDM 
SY 24-3383 2821 Integrated Control Unit, FEMM 
SY 25-3479 2821 Control Unit, Two-Channel Switch, 
FETOM 
SY24-3508 2821 Control Unit, Two-Channel Switch, 
FEMDM 
2540 Card Read/Punch 
SY31-0081 2540 Card Read/Punch, FEMI 
SY31-0168 2540 Card Read/Punch, FEMDM 
SY31-0082 2540 Card Read/Punch, FEMM 
1403 Printer 
$225-6492 1403 Printers, FEMI 
$225-6493 1403 Printers, FEMM 
Legend: 
FETOM  -— Field Engineering Theory of Operations 
Manual 
FETMM~ — Field Engineering Theory and Maintenance 
Manual 
FEMI — Field Engineering Manual of Instruction 
FEMDM _— Field Engineering Maintenance Diagrams 
Manual 
FEMM — Field Engineering Maintenance Manual 
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The IBM 9020E Display Channel Processor (DCP) System is 
an important part of the total complex of computers and 
computer-controlled equipment used in the air traffic 
control (ATC) task. The purpose of this equipment is to 
acquire accurate and adequate data and to present it for use 
by the flight controllers in real time. Figure 1-1 shows an 
overall view of this equipment complex, known as the 
National Airspace System (NAS) En Route Stage A, and 
illustrates the role of the 9020E system. 

The overall ATC task includes a number of fairly distinct 
activities, some of which are listed below so that the role of 
the DCP system may be viewed in perspective: 

1. Acquisition of input data directly from its source (flight 
plans, radar returns, weather information, etc.). 

2. Processing of input data (sorting and formatting data, 

calculating flight paths and arrival times, etc.). 

. Production of flight progress strips. 

4. Production and transmission of various operational 
messages (within the center, to other centers, to airports, 
etc.). 

5. Production of bulk-processed radar data. 

6. Storing of flight plans, flight progress records, weather 
information, etc. 

7. Updating of stored information. 

8. Final preparation of data for display. 

9. Display of data for use by the flight controllers (radar 
data, tabular information, and weather information). 


Ww 


In addition to the ATC-related activities, the NAS 
complex provides facilities for monitoring its own opera- 
tion. This enables changing traffic loads to be accommo- 
dated, malfunctions to be detected and isolated, and 
backup equipment to be called into operation when 
required. 


Output data to 


multiple devices v1} 9020 A/D 9020 E 
£| CENTRAL DISPLAY 
3 COMPUTER CHANNEL 


Input data from 
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Figure 1-1. Role of 9020E DCP in NAS En Route Stage A Complex 
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A NAS complex centers about a Central Computer 
Complex (CCC) which may be an IBM 9020A or 9020D 
system. Each performs the same functions, but the 9020D 
has higher speed and greater capacity than the 9020A. 

Data from various sources, including digitized radar, 
teletype, IBM 1052 Printer/Keyboards, and flight data 
entry equipment, enters the NAS complex via adapters 
within the CCC which convert all incoming data to a code 
usable by the computer. This data is processed according to 
its type and source and is passed along to the appropriate 
output or is stored until needed. 

Data leaves the CCC system as various types of opera- 
tional messages, flight progress strips, and processed radar 
and weather information. The messages and flight strips are 
transferred. from the CCC via adapters which translate them 
into the appropriate transmission code for the particular 
user. For example, messages to another center might be 
transmitted via teletype so that an adapter which translates 
from the computer code to the teletype code would be 
required. 

Processed radar and weather information leaves the CCC 
system via data channels that connect to the DCP system. 
The 9020E receives this data and continues to process it for 
display. This involves sorting the data, translating from 
co-ordinates on the earth to co-ordinates on the displays, 
and formatting the data so that it can be used by the 
display equipment. The incoming radar data is also proc- 
essed according to type (beacon or primary), and the two 
are related to provide complete information on the display. 
Weather lines and tabular data are also prepared for display. 
Once the data is processed in this manner, the DCP system 
must interface with the display equipment so that the data 
can be transferred to the correct display efficiently and 
automatically. — 


Display 
Equip 


Keyboard 
Equip 
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Keyboards at each radar position enable the controllers 
to exercise control over the data displayed by requesting 
additional information, by updating information, and by 
requesting that tabular data on the display be moved. A 
“trackball” enables the controller to point out a specific 
target to the system. The keyboards and trackball are 
external to the DCP system, as are the displays. Thus, the 
DCP system has provisions for interfacing with this equip- 
ment and, when appropriate, can communicate data re- 
ceived from this source to the CCC system. 

As can be seen from Figure 1-1 and the foregoing 
discussion, the 9020E DCP system provides the link 
between the CCC system and the display equipment. As the 
name Display Channel Processor implies, it is more than a 
channel for display data; it is also capable of processing that 
data and of buffering it for display. Further, it is capable of 
handling data returned from the controllers via the radar 
keyboards. This, then, is the role of the 9020E system in 
the total environment of IBM and non-IBM equipment that 
composes the NAS complex. 

Two major interfaces enable the 9020E to link the CCC 
and the display equipment, namely, the DCP-CCC interface 
and the DCP-display equipment interface. The first of these 
represents an interface between two groups of IBM equip- 
ment; thus, it is similar to other interfaces internal to the 
CCC and DCP systems. This interface is the type that is 
used to attach input/output (I/O) equipment to computers 
in the IBM System/360 line and is referred to as the 
“standard I/O interface” in this manual. A summary of this 
standard interface is provided in Chapter 3. 

DCP-display equipment interfacing consists of more than 
one interface. Separate interfaces exist for the transfer of 
display data, of radar keyboard data, and of control and 
configuration data. These interfaces are discussed more 
fully following discussions of system requirements and 
system elements which are basic to understanding the 
interfaces. 

Note that both the CCC system and the DCP system 
interface with a System Maintenance Monitor Console 
(SMMC) which is external to both systems. The SMMC 
provides a central location from which maintenance person- 
nel may monitor the overall operation of the NAS complex. 


SYSTEM REQUIREMENTS 


Because the NAS complex is engaged in the critical, 
real-time task of air traffic control, it is necessarily designed 
for maximum reliability. That is, the probability of the 
entire NAS complex being catastrophically rendered in- 
capable of performing its mission is extremely low. Since all 
equipment is subject to failures to some extent, provision is 
made for failures so that they do not catastrophically 
interfere with the performance of the ATC task; this is 
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achieved partly through the use of highly reliable equip- 
ment and partly through a ‘fail-safe’? and ‘‘fail-soft” 
approach. A fail-safe system is one that can perform its 


entire workload in the presence of any single element. 


malfunction. A fail-soft system is one that is not com- 
pletely crippled by the presence of a malfunction but, 
instead, performs only the essentials of its workload, 
delaying nonessential operations until later. 

These concepts of reliability, fail-safe, and fail-soft, 
which are inherent in the NAS complex, are achieved 
within the 9020E system as a result of the following: 

1. Equipment designed for maximum reliability and mini- 
mum downtime. 


2. Battery backup power in all major elements which | 


switches in automatically when there is a loss of external 
power. 

3. Redundant (spare) elements provided for each major 
element. 

4. The facility within each element to operate at various 
levels or states of operational capability. 

5. The facility to dynamically reconfigure elements into 
subsystems which are appropriate to the current work- 
load and which accommodate malfunctioning elements. 

6. Elaborate facilities available to the program for moni- 
toring malfunctions and abnormal conditions. 

7. The capability of operating under a control program 
which can provide more rapid responses to changes in 
workload and system environment than could be pro- 
vided by manual intervention. 


These seven points are enlarged upon in the following 
text so that it can later be seen how the system require- 
ments give rise to most of the hardware features of the 
9020E system which are described in the remaining 
chapters of this manual. 

The 9020E system comprises a number of elements, 
each of which is a solid-state device that provides high 
reliability. Elaborate parity-checking is incorporated so that 
errors may be detected. Downtime is minimized by the 
inclusion of maintenance features, at both the element and 
subsystem levels, which facilitate rapid isolation of failures. 
These features include maintenance panels for standalone 
testing, fault-location tests in some elements, and diagnostic 
programs for all elements and units. 

Major elements in the DCP system are provided with 
battery backup power sources which can be automatically 
switched in when the element senses the loss of external 
power. Only major elements have this facility since loss of 
all power at a center results in loss of input data; hence, 
there is no need for peripheral I/O equipment. Further, loss 
of power to an individual, piece of I/O equipment can be 
dealt with by substituting a redundant I/O device. However, 
unexpected loss of power to equipment in which the 
program is running is intolerable because no logical re- 


starting point can be determined when power is restored. 
That is, there would be no way to determine what data had 
been processed and what had not. Extensive and time- 
consuming reinitialization would be required. 

The battery backup power source permits the program 
to continue operating for approximately 5 seconds after 
external power loss so that a logical stopping point (check 
point) can be established by the program. The system can 
then power down normally. When power is restored, 
processing can begin where it left off, with very little lost 
time. 

Element redundancy is designed into the 9020E system 
so that more elements are available than are actually 
required for the performance of the ATC task. Some 
redundant elements may be failing elements which have 
been isolated from the system for maintenance, whereas 
others are “good” elements capable of being called into the 
ATC system. The recallable elements may be undergoing 
preventive maintenance or may be part of a subsystem 
involved in the maintenance of a particular element. They 
may also be engaged in the performance of non-ATC tasks, 
such as program debugging or the running of programs to 


perform a desired task not directly related to the ATC 


function. 

Each element can operate in any one of four states of 
operational capability. The state of an element determines 
the degree of manual control which maintenance or 
operating personnel may exercise over it. For example, in 
state’ 0 (the lowest operational state), virtually all element 
controls are operational so that maintenance may be 


’ performed on the element. In fact, by placing the element 


in Test mode, the ATC system will be denied use of the 
element completely. In state 3 (the highest operational 
state), virtually all manual controls are disabled so that the 
element can operate in the ATC system without inter- 
ference. From the larger point of view, element state may 
be looked upon as the element’s degree of availability to 
the ATC task. 

Each element has a configuration control register (CCR) 
which determines three things for it: (1) with which other 
elements in the system it may communicate, (2) what 
element state it is to assume, (3) which computing elements 
may change its configuration. The setting of these CCRs is 
under direct program control. Thus, it is possible for the 
program to alter the structure of the system as required. 
For example, if the traffic load increases, additional 
elements may be brought into the system; if an element 
fails, another element may be substituted. 

To react to abnormal conditions, the program must be 
made aware of them. Elaborate monitoring facilities are 
built into the 9020E system. Provision is made to report 
the following to the program: logic checks, power checks, 
overtemperature conditions, the switching of an element to 


battery power, failure of an element to have valid data in its 
CCR, and the inability of an element to continue operation. 

Most of the preceding text dealt with the manner in 
which various abnormal conditions are brought under 
program control and with the special facilities available to 
the program to respond to these conditions. All of this 
presupposes a running program that is capable of con- 
trolling the system. This brings us to the seventh point 
listed earlier. 

The 9020E system is designed to operate under a controi 
program (sometimes called a “monitor” or “supervisor’’). 
The control program for the 9020 systems is called the 
executive control (EXC) program. Certain hardware imple- 
mentation is provided specifically for the control program, 
e.g., certain instructions (called privileged instructions) are 
reserved for use only by this program. 

As a result of these provisions, the EXC program may 
control the loading and execution of various subprograms; 
these subprograms run independently of the EXC program 
and of each other but may call upon the EXC program for 
various services. The EXC program is called via an “‘inter- 
ruption” capability which is part of the 9020 architecture. 
This same interruption facility is used to inform the EXC 
program of various other exceptional or abnormal condi- 
tions such as the progress of an I/O operation or a 
malfunction in an element. This is discussed in further 
detail in Chapter 6. 

In summary, the 9020E system is required to perform 
the ATC task of linking the CCC system and the display 
equipment in a reliable, fail-safe, and fail-soft manner. To 
accomplish this, the system is designed for reliability and 
quick repair, and is provided with battery backup and the 
ability to operate under a control program. The latter has 
available to it redundant elements which can be operated in 
four different operational states and which can be dynam- 
ically reconfigured to accommodate changing workload and 
malfunctions. Provision is made for the control program to 
monitor for malfunctions and other exceptional or ab- 
normal conditions. 


FUNCTION OF DCP SYSTEM ELEMENTS 


Figure 1-2 shows, in simplified form, the internal makeup 
of the 9020E system. Although the system contains 
redundant elements for most of the elements shown in 
Figure 1-2, only one of each type is shown for simplifica- 
tion. 

The computing elements (CEs) form the nucleus of the 
system, providing the computational and logical capability 
necessary to execute programs and control the operation of 
other elements in the system. Though only major data 
interfaces are shown in Figure 1-2, note that the CEs 
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Figure 1-2. Function of DCP Elements 


interface with almost every element in the system for 
configuration control and for error and abnormal condition 
monitoring. 

As the prime element responsible for program execution 
(minor processing tasks can be delegated to the IOCE 
processors), a CE executes both the EXC program and the 
subprograms which accomplish the ATC task. These pro- 
grams and the related data which they process are stored in 
Storage Elements (SEs). The CEs fetch instructions and 
data from the SEs and store the processed data back into 
the SEs. 

The computing element in the 9020E system is provided 
with a class of instructions, called display instructions, 
which make possible rapid processing of the large amount 
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of radar and weather information that enters the system 
from the CCC system. 

Processed display data is transferred to Display Elements 
(DEs) which are, in many respects, similar to SEs. However, 
they have the additional capabilities of interfacing with the 
display equipment and of servicing data requests from that 
equipment. Figure 1-2 shows the display equipment, 
external to the DCP system, with which the DEs interface. 

Plan view displays (PVDs) are driven by character vector 
generators (CVGs) which, in turn, are associated with 
display generators (DGs). The DEs service requests from the 
CVGs via the DE-DG interface. 

The 9020E task of preparing data for display involves 
processing the data, placing it in separate locations in the 


DEs for each CVG, and making it possible for each CVG to 
access the correct data. The latter objective is accomplished 
by establishing proper addresses, in the circuitry of the DE 
which interfaces with the display equipment, so that each 
display receives data from the correct storage location. The 
DE is capable of keeping track of these addresses for each 
CVG once they are established by programming. 

A large portion of this task is accomplished with three 
display instructions: Convert and Sort Symbols (CSS), 
Convert Weather Lines (CVWL), and Repack Symbols 
(RPSB). Figure 1-3 is a simplified diagram of the flow of 
radar and weather data through the 9020E system. Within 
the block that represents the 9020E DCP system, the 
curved arrows indicate how the radar and weather line data 
is processed for display. 
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Figure 1-3. Processing of Display Data 


Weather line data is arranged by the program into a 
format that is acceptable to the CVWL instruction. This 
instruction is then executed on the data. The weather line 
data is extracted from the SE by the CVWL instruction and 
is processed for display on a PVD. As it is processed, it is 
placed in the proper DE. 

Processing radar data involves two display instructions 
instead of one. Again, the program arranges the data in a 
format acceptable to the display instructions. The CSS 
instruction is then executed. This instruction sorts the data 
into 16 groups, called sort bins. Each group represents the 
data that is to be displayed on 1/16th of a particular PVD. 
This data is returned to the SE, as the arrow in Figure 1-3 
indicates. The CE must then execute an RPSB instruction. 
One RPSB instruction processes the data in one sort bin. 
Sixteen RPSBs are required to process the data for an entire 
PVD. During execution of an RPSB instruction, data is 
extracted from the sort bins in the SE and is placed in the 


correct format for display. The RPSB instructions place the 
data in the DE. When it has been processed in this manner 
for a particular PVD, the addresses in the DE are updated 
so that the CVG may access the updated information. 

The DE-DG interface represents the only point at which 
data enters or leaves the DCP system without using an 
Input/Output Control Element (IOCE). The IOCE handles 
all other input and output. 

Input/output (I/O) operations are performed by the 
IOCEs under control of the CEs. The IOCEs are also able to 
perform processing tasks when they are assigned such tasks 
by the controlling CE. This capability is referred to as the 
IOCE processor feature. However, the primary function of 
the IOCE is to relieve the CE of the burden of fetching and 
storing data for transfer to or from I/O devices. This leaves 
the CE free for processing tasks. IOCEs have access to the 
SEs so that this storing and fetching of data may proceed 
independently of CE operation once an I/O operation has 
been initiated by the CE. 

Each IOCE has channels that connect it to I/O control 
units. These control units, in turn, control I/O devices 
individually or in groups. Channels consist of two different 
types: selector channels and multiplexer channels. A 
selector channel can operate with only one I/O device until 
the operation is completed; this is called burst mode. A 
multiplexer channel, while it can operate in burst mode 
also, is designed to operate with a number of I/O devices at 
the same time, time-sharing its data path with them. Via 
these channels, the I|OCE communicates with the following: 
1. A channel of an IOCE in the CCC system. 

2. Magnetic tape units via a tape control unit (TCU). 

3. Keyboards and trackballs at radar positions, via a data 
adapter unit (DAU). 

4. 1052 Printer/Keyboards, via 1052 adapters housed in 
the CEs. 

5. A number of units via the configuration console. (These 
are discussed later.) 

A single configuration console (CC) provides a central 
location for operator monitoring and control of the DCP 
system. No redundant CC is provided since all critical 
controls and indicators are duplicated elsewhere in the 
system. The CC also houses two reconfiguration control 
units (RCUs) which extend the reconfiguration capability 
of the 9020E to include the IOCE-DAU interface and 
certain interfaces that are external to the DCP system. 
Either RCU is capable of the reconfiguration task; the 
second RCU is redundant. The reconfiguration interfaces of 
the RCUs are described in detail in Chapter 3. 

As mentioned previously, the IOCE communicates with 
the CC via an I/O channel. Within the CC, this channel is 
connected to the following: 

1. A system console portion of the CC. 
2. An IBM 2540 card read/punch and an IBM 1403 
high-speed printer via an IBM 2821 I/O Control Unit. 
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3. The RCUs. 
4, The System Maintenance Monitor Console (SMMC). 


9020E DCP SYSTEM STRUCTURE 


Figure 14 represents, in simplified form, a typical 9020E 
system configuration. This system can be expanded. A 
maximum system includes the following number of each 
element/unit type: 4 CEs, 5 SEs, 5 DEs, 3 IOCEs, 3 TCUs, 


2 DAUs, and 1 CC. Note that, except for the configuration _ 


console, there is more than one of each element type, even 
in the smaller system shown in Figure 1-4. This system can 
be configured into as many as three subsystems, each 
functioning independently but under ultimate control of 
the EXC program running in any one of the CEs. 

The DCP is a multiprocessing system because more than 
one processor can be operating at the same time. Further, 
the processors are capable of communicating with each 
other without manual intervention. This is a requirement of 
a true “multisystem” (multiple computing element system). 
Successful multisystem operation under a single control 
program requires hardware facilities which make possible 
communication between CEs and the sharing of storage. 
These features, together with a control program such as the 
EXC program, enable the co-ordinated operation of mul- 
tiple processors. This subject is dealt with in detail in 
Chapter 6. 

The system shown in Figure 14 can be configured by 
the EXC program so as to design subsystems for particular 
tasks. The number of elements available is greater than the 
number required by the heaviest workload, so that a failing 
element may be replaced by a redundant element. When the 
workload permits, an entire subsystem may be dedicated to 
the testing or diagnosing of a malfunctioning unit or to 
tasks not directly related to the ATC task. The configura- 
tion control facility of the 9020E enables the EXC program 
to establish these subsystems by prescribing which elements 
may communicate. By enabling and disabling communica- 
tion paths between elements, many different configurations 
may be structured. For example, in Figure 1-4, a subsystem 
might be configured which uses CE 2, SEs 3 and 4, DEs 1 
and 2, IOCE 1, TCU 1, and DAU 2. The remaining elements 
could be configured into a second subsystem or be left as 
redundant elements. The configuration control facility and 
the large number of interelement interfaces make the 
9020E very flexible. Chapter 3 describes all of the 
interfaces in detail; Chapter 4 describes configuration 
control. . 

As noted previously, a failing element can be replaced by 
a redundant element through reconfiguration. This applies 
to CEs as well as any other element. However, note that a 
failure in the CE which is executing the EXC program can 
also be accommodated by special hardware which permits 
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another CE to automatically assume the task of executing 
the program. Details of this procedure are found in 
Chapter 7. 

Replacement of an SE or a DE introduces special 
requirements also. First, an alternate SE must be estab- 
lished as soon as the original configuration is formed so that 
certain critical areas of storage can be kept updated for use 
if replacement become necessary; this is a program con- 
sideration. Another consideration is the fact that each SE 
or DE represents a fixed block of storage addresses which 


“must be reconciled with the logical addresses from the 


program when a substitution is made. This is accomplished 
by a hardware-implemented address translation capability 
in the CEs and IOCEs. Addresses from the program are 
automatically translated into the proper physical addresses 
for the element that occupies that logical block of 
addresses. This capability, and storage addressing in general, 
is described in Chapter 5. 

A failure in an IOCE may be accommodated by 
replacing the IOCE. As can be seen in Figure 14, changes in 
data paths to the various I/O control units or devices are 
also required. . 

Malfunctions in IOCE channels, I/O control units, or 
individual devices are allowed for in two different ways. In 
some cases, redundant elements are required; in others, 
multiple data paths are used. For example, control units are 
usually served by more than one channel; I/O devices are 
often served by more than one control unit. Depending on 
the nature of the malfunction, the EXC program can select 
the appropriate option to circumvent the failing device or 
interface and continue operation. 

As stated previously, the EXC program has available to it 
extensive system-monitoring facilities. Data paths are pro- 
vided for system-monitoring which are not controlled by 
the CCR as are normal communication paths. In this way, 
the EXC program can be alerted to malfunctions and 
abnormal conditions even though the normal communica- 
tion paths are blocked. 

The manner in which these system-monitoring facilities 
are implemented in the 9020E system is described in 


_ Chapter 7. Descriptions of individual element-handling of 


error and abnormal conditions are provided in Chapter 8, 
combined with an explanation of how these function 
together to form an integrated monitoring and malfunc- 
tion-handling approach. 

This chapter has presented an overall view of the 9020E 
system in the context of the larger ATC environment in 
which it operates and of the tasks it must perform. 
Concepts which underlie the structure of the system have 
been introduced. The system structure, itself, has been 
shown to consist of a number of elements. Chapter 2 
enlarges upon the discussion of system structure by 
providing a description of each of these elements. 
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Figure 1-4. Typical 9020E Display Channel Processor 


This, chapter enlarges upon the discussion of system 
structure in Chapter | by describing each of the system 
elements. The descriptions are brief and are intended to 
provide the reader with sufficient background to under- 
stand the system concepts (such as redundancy, reconfig- 
uration, address translation, and system monitoring) which 
are discussed in the remainder of this manual. Detailed 
information about a particular element may be found in the 
theory manual for that element. 

Certain elements described below are identical with 
elements used in the 9020D CCC system; namely, the CE, 
IOCE, SE, and TCU. The CE performs functions in the 
9020E system which are not used in the 9020D system; 
nevertheless, the two CEs are physically alike. 


IBM 7201-02 COMPUTING ELEMENT 

e Focal element within the 9020E system. 
@ Maximum of four CEs can be installed. 

e Contains no internal main storage. 

e Interfaces with IOCEs for I/O operations. 
e Self-contained and self-powered. 

e Battery backup power. 


The IBM 7201-02 Computing Element (CE), shown in 
Figure 2-1, is the focal element within the 9020E system. It 
provides the capability to establish and control the multi- 
element computer system and contributes the facility for 
computation and logic required to process data for air 
traffic control. 

A maximum of four CEs may be installed in the 9020E 
system. Each CE is a self-contained element capable of 
operating the executive control (EXC) program and of 
controlling other CEs or of operating as part of a subsystem 
under control of another CE. Thus, CEs are interchangeable 
in the event of a malfunction. 

The CE contains no internal main storage; it interfaces 
with standalone storage elements (SEs) for the storage of 
instructions and data. It also interfaces with IOCEs for all 
I/O operations so that maximum time is devoted to 
processing. Interfacing between each CE and every major 
element and unit in the system makes possible multisystem 
control and monitoring. 


CHAPTER 2. SYSTEM DESCRIPTION 


The CE is a self-powered unit and is provided with 
battery backup power that is capable of sustaining it for 
approximately 6.5 seconds if there is an external power 
loss. 


Interfacing 


e CECE interface for configuration, address translation 
data, and direct control. 


e CE-SE/DE interface for transfer of data. 


e CE-TCU and RCU interface for configuration control 
and error monitoring. 


e CE-IOCE interface for configuration, address translation 
data, and I/O control. 


e CE-CC interface for remote monitoring and control. 


As the controlling element in the system, the CE interfaces 
with every major element and unit. Figure 2-2 shows this 
interfacing in simplified form. Five main types of interfaces 
are shown: 

1. CE-CE 

2. CE-SE and DE 

3. CE-TCU and RCU 

4. CE-IOCE 

5. CE-CC 


The CE-CE interface provides data paths for configuration 
information, address translation information, and direct 
control. Note that each CE also interfaces with itself for 
these purposes. Other interface lines conduct the system 
reset, direct control signals, and the element check (ELC) 
signal. These control lines enable any CE to monitor the 
operation of the other CEs and to co-ordinate them in 
multisystem operation. 

Each CE interfaces with each SE and DE in the system. 
These interfaces are similar. A storage data bus in (SDBI) 
and a storage data bus out (SDBO) provide for the transfer 
of data between the CE and storage, a doubleword at a 
time. The SDBI is also used to transfer configuration data 
to SEs and DEs. No separate configuration bus exists to 
these elements. Separate interface lines are provided for 
storage addresses and keys. A number of additional 
interface lines permit synchronized operation and permit 
the CE to monitor for SE and DE errors and for abnormal 
conditions. 
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Figure 2-1. IBM 7201-02 Computing Element (CE) 
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Figure 2-2. Computing Element Interfacing 


Note that in the CE-DE interface special lines exist to 
permit testing of DEs without interference with display 
equipment. Request lines from the CE to the DE permit the 
CEs to request from the DEs data which would normally be 
transferred to the display equipment. A special “(DE Wrap” 
bus is provided for return of the data to the CE. 

The CE interfaces with TCUs and RCUs. These inter- 
faces are similar. Provision is made for configuration data to 
be transferred to these units and for the necessary signals to 
permit the CE to select the units for configuration and 
monitor them for errors and abnormal conditions. 

The CE-IOCE interface provides for control of the IOCE 
by the CE, but no direct data path exists between the two 
elements; shared storage is used for this purpose. The major 
portion of the CE-to-IOCE interface consists of a control 
bus which is used for the following purposes: configuration 
and address translation information, I/O instructions, 
IOCE-processor start, initial program load (IPL), interrupts, 
and logout. The CE’s preferential storage base address 


(PSBA) is placed on the bus to enable the IOCE to locate 
the CE’s preferential storage area (PSA) for I/O instruc- 
tions, IPL, interrupts, and logout. A CE’s PSA is a 
program-established block of storage set aside for certain 
status and control information that is critical to the 
operation of the automatic interruption facility, IPL, I/O 
operations, and logout. | 

The IOCE-to-CE interface lines consist mainly of signal 
lines which permit CE and IOCE operation to be synchro- 
nized when necessary and which permit the CE to monitor 
for errors and abnormal conditions. Direct control signals 
are provided between CEs and IOCEs, but no direct control 
data path exists. 

The CE interfaces with the configuration console (CC) 
to enable the CE status to be displayed at the console and 
to enable various CE control panel functions to be 
controlled remotely from it. 

In all the interfaces mentioned, certain common charac- 
teristics exist. Provision is made for the CE to configure all 
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elements and to monitor them for abnormal conditions. 
Each element is also provided with a system reset signal. 

In Figure 2-2, note that lines are shown entering and 
leaving the CE to connect with a 1052 adapter. This 
adapter is housed in the CE and connects an IOCE 
multiplexer channel to a 1052 Printer/Keyboard located at 
the CC. It is not otherwise related to CE operation. 

Refer to Chapter 3 for a detailed discussion of element 
interfacing. 


Internal Organization 


Figure 2-3 shows the internal organization of the CE in 
simplified form. For purposes of description, the CE is 
divided into eight major areas as follows: 

. Control 

. Address translation 

. Storage Control Interface (SCI) 

. Instruction fetch and operand pre-fetch logic 

. Instruction execution logic 

. Interruptions and exceptional conditions 

. External interfaces 

. Manual controls and maintenance features 


On NNR WN 


Control 
e Clock. 
e ROS. 
e PSW. 
e CCR. 


The control portion of the CE consists primarily of: (1) the 
clock, (2) read-only storage (ROS), (3) the program status 
word (PSW) register, and (4) the configuration control 
register (CCR). The clock and its associated timing circuitry 
cause the CE to operate on a basic cycle time of 200 ns. 
The most significant feature of the control circuitry is the 
ROS, which replaces most conventional sequence triggers 
and control lines. 

The ROS contains 2816 100-bit words. Each ROS word 
is divided into 22 control fields. Bit patterns contained in 
these fields constitute coded micro-orders. Signal lines 
representing these micro-orders directly control the data 
flow within the CE. Also coded into the ROS word is the 
address of the next ROS word to be accessed. This address 
may be modified by various branching conditions. In this 
manner, sequences of ROS words are formed into micro- 
programs that are capable of controlling entire operations 
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_ or instructions. Modification of the data stored in the ROS 


unit can be accomplished only by physically changing the 
components. 

To achieve greater speed and efficiency, a number of 
control functions are hardware-implemented. For example, 
the fetching of instructions when the doubleword buffer 
register requires refilling is initiated by hardware while the 
ROS continues with instruction execution. 

The PSW register and the CCR also contribute to the 
control of the CE by establishing such factors as: which CE 
instructions can be performed, which interruptions are 
permitted, with which other elements the CE can com- 
municate, etc. 


Address Translation 

e Translation from logical to physical addresses. 
e ATR used for normal access translation. 

e PSBAR used for PSA access translation. 


The address translation portion of the CE is shown at the 
upper left in Figure 2-3. This portion provides translated 
addresses to the storage control interface (SCI) so that 
logical addresses from the program can be used to access 
data and instructions from the physical storage which is 
currently configured. Two registers are primarily respon- 
sible for the translation: the address translation register 
(ATR) and the preferential storage base address register 
(PSBAR). The ATR translates addresses during normal 
storage accesses. PSBAR is used to keep track of the CE’s 
PSA location and to provide translation of addresses for 
PSA accesses. These registers are set by the control 
program. 


Storage Control Interface (SCI) 

The SCI contains the logic necessary for the handling of 
storage requests. It is responsible for synchronizing the CE 
operation with storage operation. This ability rests chiefly 


on the SCI’s ability to stop the CE clock briefly when 
necessary. 


Instruction Fetch and Operand Prefetch Logic 
e Instructions sequence through Q, R, and E registers. 


e IC and D used for addressing instructions and operands. 
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Figure 2-3. Computing Element Internal Organization 


The CE contains a doubleword instruction buffer called the 
Q-register which is kept filled Via hardware circuitry. 
Instructions are passed on to the R-register for predecoding 
and to permit operands to be prefetched so that they are 
available when the CE has finished executing the current 
instruction. An E-register provides for storage of the 
instruction that is currently being executed. 

Two registers are provided for addressing storage: the 
D-register and the instruction counter (IC). In general, the 
D-register is used for data addresses and the IC is used for 
instruction addresses. However, there are exceptions to this 
general rule. 


Instruction Execution Logic 

e Registers and counters. 

e Parallel and serial adders. 

e Local storage. 

e Special logic for display instructions. 


As shown in Figure 2-3, the instruction execution logic is 


divided into four general areas. The common instruction 
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execution logic consists of adders, registers, counters, and 
associated data paths. The most salient functional units in 
this area are the two doubleword registers (AB and ST) and 
the doubleword parallel adder. The latter provides for rapid 
processing of binary integers and is capable of performing 
certain logical functions as well as arithmetic functions. 

A single-byte serial adder provides the capability of 
performing binary, decimal, or logical functions. For 
decimal operations, data may be gated to the serial adder 
from any byte position of the AB and ST registers. 

The common instruction execution logic operates in 
conjunction with a local storage which contains 16 general]- 
purpose registers (single word), 4 floating-point registers 
(doubleword), and 1 working register. All the local storage 
registers are available to the programmer except the 
working register. 

Two registers (F and G) provide for single byte data 
buffering for direct control functions. This makes possible 
the direct transfer of data between CEs, one byte at a time. 

Virtually all of the instructions in the CE’s instruction 
set are performed by the logic discussed thus far. The 
display data formatting logic augments the common in- 
struction execution logic during execution of certain 
display instructions. 


Interruption and Exceptional Conditions 

e Interruptions detected by hardware. 

e PSW enables selective masking of interruptions. 

e PIR records IOCE-processor interruptions. 

e DAR records interruption requests from other elements. 


e DARM provides selective masking of DAR interruption 
requests. 


Logic is provided in the CE to enable five types of 
interruptions to automatically branch the program to 
routines that are programmed to handle them. The status of 
the CE and of the interrupted program is automatically 
saved to provide an immediate return after the interruption 
is handled. These interruptions may result from program 
errors, subprogram calls to the control program, machine 
checks, I/O equipment requiring attention, an JOCE proc- 
essor requiring attention, or a variety of external requests. 
Bit positions in the PSW enable the program selectively to 
mask off these interrupt requests so that they may be 
handled in an orderly fashion. 

Additional registers in the CE provide for the special 
considerations involved in IOCE-processor and external 
interruptions. The processor interruption register (PIR) 


2-6 (7/70) 


retains the identity of the IOCE that requests an IOCE- 
processor interruption. The diagnose accessible register 
(DAR) retains the source of interruption requests that 
originate outside the CE as a result of malfunctions or 
abnormal conditions in other elements. Certain abnormal 
conditions that occur within the CE also set bits in the 
DAR. A DAR mask (DARM) register provides for selective 
masking of DAR interruption requests. 

In addition to interruption requests, hardware and 
microprogram facilities are provided for handling excep- 
tional conditions that arise during processing. 


External Interface 


This functional area of the CE contains the line drivers and 
receivers and the gating circuitry for the many interfaces 
with other elements in the system. To a large extent, 
interface gating is derived from the CCR. 

Also related to the external interfaces are the select and 
external registers. Bits set into the select register by the CE 
determine which elements will be requested to accept 
configuration or address translation information. Data to be 
transferred to other CEs, IOCEs, TCUs, and RCUs for 
configuration purposes passes through the external register. 
The external register is also the source of control buses to 
the IOCEs over which the CE controls IOCE operation. 


Manual Controls and Maintenance Features 
e Control panel. 

e Parity check logic. 

e Scan-in, logout logic, and FLTs. 

e Microprogram diagnostics. 

e Ripple tests. 

e Marginal checking. 


This area of the CE includes the control panel and logic for 
malfunction detection and malfunction isolation. Extensive 
checking circuitry continually checks for parity errors in 
instructions or in data being transferred within the CE. 
Check registers are provided to indicate such errors when 
they occur. 

In addition to this checking circuitry, scan-in and logout 
circuitry permits testing of the CE at the logic block level 
via fault-locating tests (FLTs). The logout facility also 
permits the status of the CE, at the time an error occurs, to 
be stored in main storage for subsequent program analysis. 


Other built-in maintenance facilities include a micro- 
program diagnostic for checking various registers, micro- 
programmed storage ripple tests for testing the ability of 
the CE to access main and local storage, and marginal 
checking features which permit certain voltages and timings 
to be varied to detect circuitry which is operating margin- 
ally. 


IBM 7231-02 I/O CONTROL ELEMENT 


e A maximum of three IOCEs. 

e Performs the I/O functions within the DCP system. 
e@ Performs IOCE-processor operations. 

e IOCE functions are initiated by the CE. 


e Battery backup power. 


The IBM 7231-02 I/O Control Element (IOCE) has two 
major functions: an IOCE-processor function and an IOCE 
channel-controller function. The latter enables I/O units to 
be attached to the 9020 system. The IOCE-processor 
function permits processing to be performed by an IOCE. 

I/O control units, with their associated devices, are 
attached to the IOCE (Figure 24) by one multiplexer 
channel and three selector channels. However, the 9020 
system is restricted to a maximum of eight selector 
channels: three each on IOCEs 1 and 2 and two on IOCE 3. 

The IOCE operates in conjunction with the CE and is 
dependent on it for the initiation of all operations. 

Up to three IOCEs may be incorporated in the 9020 
system. The EXC program assigns (configures) these IOCEs 
as necessary to meet the demands of the system. The 
assignment is accomplished by programming and does not 
require operator intervention. 

The IOCE power system is self-contained and is provided 
with battery backup. The battery backup operation, like 
that of the CE, can sustain operation of the IOCE for 6-1/2 
seconds if there is a loss of external power. 


Figure 2-4. IBM 7231-02 I/O Control Element (IOCE) 
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Each IOCE is provided with a master circuit breaker so 
that ac power can be removed for maintenance purposes. 
An IOCE can be powered up and down without disturbing 
other elements in the system. 


Interfacing 
e Unique interfaces with CE, SE, and CC. 
e Selector and multiplexer channels are standard interface. 


The IOCE interfaces are shown in Figure 2-5. Some of the 
interfaces are unique, but many are standard I/O interfaces 
(selector and multiplexer channels). The IOCE communi- 
cates with CEs, SEs, and the configuration console (CC) via 
unique interfaces. While the CC uses a unique interface to 
monitor the IOCE, these two elements are primarily 
connected via the multiplexer channel which is used for 
communication between the IOCE and four main areas: (1) 
the two Reconfiguration Control Units (RCUs), (2) certain 
console controls and indicators, (3) the reader/punch and 
printer, and (4) the System Maintenance Monitor Console 
(SMMC). Refer to Chapter 3 for a detailed Cciscussion of 
element interfacing. 
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Figure 2-5. JOCE interfacing 


The selector channels are used for communication with 
magnetic tape units via the IBM 2803-01 Tape Control Unit 
(TCU). These channels are also used for communication 
with the 9020A or D Central Computer Complex (CCC) 
through the use of channel-to-channel (CTC) adapters. It is 
via the CTCs that display data enters the DCP system. 

The CTCs provide communication between the CCC 
system and the DCP system by allowing the rapid transfer 
of large blocks of data from a storage element in one 
system to a storage element in the other system. A CTC is 
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physically housed in one of the two channels between 
which communication paths are required. Figure 2-6 shows 
an example of CTC adapter usage. In a particular IOCE, up 
to two CTC adapters may be installed, one in selector 
channel 1 and one in selector channel 2. The CTC adapter 
appears to each channel as a standard control unit and is 
connected by means of the standard I/O interface. 


For detailed information, refer to the Channel-to- 


Channel Adapter, Model 6006A, Theory-Maintenance 


Manual, and the associated Maintenance Diagrams Manual. 


Internal Organization 


Figure 2-7 shows the internal organization of the IOCE, ir 

simplified form. The heavy lines show the major breakdcwn 

into channels, common channel, and the common logic unit 

(CLU). The small arrows show control paths; the broad 

arrows, major data paths. Each IOCE contains the logic 

necessary to: 

1. Execute CE-initiated instructions. 

2. Control data flow between storage elements and W/O 
units 

3. Execute the standard instruction set during maintenance 
or IOCE-processor operations. 

4. Operate MACH storage within the IOCE. 

5. Operate and control one multiplexer channel. 

6. Operate and control up to three selector channels, 


This logic is described in detail in Field Engineering 


Theory of Operation, 7231-02 Input/Output Control Ele- 


ment. Brief descriptions of major areas of the IOCE follew 


Common Logic Unit 

e Performs basic arithmetic and logic functions. 

e Contains read-only storage. 

e Consists of adder, mover, registers, and data yaths. 


The common logic unit (CLU) consists of the logic 
necessary to perform basic arithmetic and logic functions. 
The CLU includes a read-only storage, used for micropro. 
gram control of the IOCE, plus an adder, mover, data paths, 
and registers used for temporary storage of data and control 
words. 

Most of the data transfers within the CLU, and to or 
from a storage element, are in full words (32 data bits). 
Data parity on each 8-bit byte is checked during the 
transfer. 

The CLU contains fullword registers, which are used to 
store channel data and control words, located in a 64-wo1d, 
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0.5-usec local storage. Working registers and general regis- 
ters are also located in local storage; these registers are used 
in channel, diagnostic, and IOCE-processor operations. 

Data flow is controlled by a capacitor ROS unit that 
operates on a O.5-usec cycle. Each 90-bit word is a 
microinstruction and controls the operation of the IOCE 
for one 0.5-usec cycle. Groups of microinstructions are 
linked to form a microprogram. A microprogram controls 
the entire sequence of cycles forming a complete operation; 
for example, the transfer of a data word to a channel. 
Modification of the data contained in this unit can be made 
only by physically changing the components. 


MACH (Maintenance and Channel) Storage 


e Contains channel control and status information. 


e Can contain instructions and data for an IOCE proc- 
essor. 


e Provides standalone maintenance capabilities. 

e Comprises 131,072 bytes of storage. 

This 13K-byte MACH storage is used as storage for 
multiplexer channel functions during I/O operations in the 


active ATC system; MACH also contains data and instruc- 
tions that are used during IOCE-processor operations. 
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MACH storage is a coincident current magnetic core 
storage unit designed to operate at a cycle time of 2.0 usec. 
The method of address selection is direct drive of coin- 
cident current through each segment of the array. Each 
plane of the array determines two bits and results in a 
36-bit readout in the 18-plane array. 

Addressing of MACH is from bits 15—29 of the storage 
address register (SAR). The top 4096 bytes (1024 words) 
are addressed by special multiplexer channel micro-orders. 
This area of MACH is used for multiplexer channel 
operations and is referred to as “bump” storage. The 
remaining addresses are used for channel data and for. 
IOCE-processor data and instructions. 


Multiplexer Channel 
e@ One multiplexer channel per IOCE. 
e Has 256-subchannel capability. 


Each IOCE contains one multiplexer channel that is capable 
of controlling several low- or medium-speed I/O devices 
simultaneously or one higher-speed unit in “burst” mode. 

Within the limits imposed by its data-transfer capabili- 
ties, the multiplexer channel can handle any standard 
interface device. A maximum of eight control units can be 
directly attached to the multiplexer channel. Up to 256 
subchannels can operate simultaneously. 


The upper 4096 locations of MACH storage are used to 
store control words for each of the 256 possible subchan- 
nels. 

Devices attached to the multiplexer channel include: 

Configuration console 

Reconfiguration control units (contained in CC) 

IBM 1052 I/O Printer/Keyboard 

IBM 2821 Control Unit for the 2540 and 1403 

IBM 2701-01 Data Adapter Unit 


Selector Channel 

e Handle high-speed I/O devices. 

e Two selector channels per IOCE. 

e Expandable to three on first two IOCEs. 


Each IOCE contains two selector channels that are capable 
of handling high-speed I/O devices. The selector channels 
are expandable to three on the first two IOCEs to provide a 
maximum of eight selector channels within the 9020E 
system. 

A selector channel controls the data flow of only one 
device at a time (burst mode). A maximum of eight control 
units may be directly attached to a selector channel. Each 
channel has the ability to address 256 devices. A selector 
channel can control any standard interface device whose 
data rate does not exceed that of the channel. Devices 
attached to the selector channel include tape control units 
(TCUs) and channel-to-channel (CTC) adapters. 


IOCE I/O Operations 

e IOCEs do not initiate I/O operations. 

e I/O data is transmitted between the IOCE and storage. 
e CE is signaled at end of operation. 


In the active ATC system, the IOCEs cannot themselves 
initiate I/O operations. Instead, they must rely on active 
CEs to initiate all I/O functions. The IOCE responds to the 
following I/O and supervisor instructions initiated by a CE: 

Start I/O (SIO) 

Test I/O (TIO) 

Halt I/O (HIO) 

Test Channel (TCH) 

Set PCI (SPCI) 

Set Configuration (SCON) 

Set Address Translator (SATR) 


A CE recognizes an I/O instruction and signals an IOCE 
(over thé CE-IOCE interface) to perform the necessary 
operation. The IOCE obtains the contents of the channel 
address word (CAW) from the preferential storage area 
(PSA) of the designated storage element (SE). The CAW 
defines the location of the channel command word (CCW) 
which, in turn, defines the command to be executed, the 
location in storage where the I/O data bytes are to be 
transferred, and various data controls such as byte count, 
flags, etc. This information is stored in MACH (bump) 
storage for multiplexer channel operations or in local 
storage for selector channel operations. 

The IOCE sends the operation to the I/O device and 
signals the CE with the appropriate condition code and 
response. The CE is now free to continue the main program 
while the IOCE simultaneously continues with the data 
transfers. 

Completion of the I/O operation (without CCW chain- 
ing) results in an interruption of the CE and storing of the 
channel status word (CSW) in the PSA of the designated 
SE. 

Three elements (CE, IOCE, and storage) are directly 
involved in the overall I/O data-transfer operation. With 
respect to the transfer of control and data information, 
note the following: 

1. Control information (indicating one of the five I/O, 
SATR, or SCON instructions) is transferred between the 
CE and IOCE. 

2. Control information, such as CAW, CCW, and PSW, is 
transferred between the IOCE and designated storage. 
The CE is not involved at this point, except for having 
designated the storage and PSA. 

3. Data transfers concerning the multiplexer and selector 
channels are directly between the IOCE and storage. 
There is no data transfer between the IOCE and the CE. 
In addition to the I/O operations just mentioned, the 
IOCE will accept signals over the CE-IOCE interface to 
perform the following special functions: 

a. Initial program load (IPL). 

b. Logout. 

c. Permit interrupt. 


IOCE-Processor Operations 


The IOCE-processor feature permits an IOCE to process 
data as well as control I/O operations and units. In 
processing data, the IOCE uses a subset of the 9020 system 
instruction set. The subset does not contain floating-point 
or decimal arithmetic instructions. From the programmer’s 
viewpoint, I/O operations and IOCE-processor operation 
are started by a controlling CE and are executed by an 
IOCE. A CE sends a Start I/O Processor instruction to an 
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IOCE, which loads a PSW from a designated location in 
MACH or main storage and proceeds with processing in the 
same manner as in a CE. Data and instructions for a 
processor come from MACH or main storage (an SE). Once 
an IOCE processor has been started, the CE can send a 
Write Direct command to stop, start, or interrupt the 
processor. The IOCE processor can execute a Write Direct 
command (external interrupt) to the controlling CE, 
causing an external interrupt in the latter (if masked on). 
The interrupt condition remains in the processor interrup- 
tion register of the CE until it is cleared by the latter 
through a Diagnose instruction. 


Figure 2-8. IBM 7251-09 Storage Element (SE) 
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IBM 7251-09 STORAGE ELEMENT 


e Solid-state core storage unit. 

e Capacity of 524,288 bytes of data. 

e Five SEs maximum on 9020E system. 
e Self-contained power supplies. 

e Battery backup power. 


e Store and fetch protection. 


The IBM 7251-09 Storage Element (SE), a solid-state core 
storage unit (Figure 2-8), is capable of storing 524,288 
bytes.of data. The SEs (maximum of five) provide the main 
storage for data being processed by the 9020E system. 

The SE uses coincident-current magnetic core storage 
arrays. The contents of storage are not destroyed under 
normal on/off sequences. Therefore, if the element is not in 
operation when power is removed, the stored data will be 
valid when proper power is restored to the element. 


Each SE is a completely self-contained unit with its own 
power supplies. Each is provided with a master circuit 
breaker so that ac power can be removed for maintenance 
purposes. An SE can be powered up or down without 
disturbing the operation of other elements in the system. 
Power control and maintenance panels provide for off-line 
maintenance and testing of an SE without disturbing other 
elements in the system. 


A battery backup power source in each SE permits 
operation to continue to a logical stopping point (check 
point) in the event of loss of external power. Thus, a 
normal power-down sequence may occur even after the loss 
of external power, so that data in the SE is preserved. SEs 
are capable of operating on battery power for 5-1/2 
seconds. 


Interfacing 


Seven interfaces provide interconnection between each SE 
and the CEs and IOCEs. An additional interface between 
each SE and the configuration console makes SE status 
available for monitoring at the console panel. Refer to 
Chapter 3 for a detailed discussion of element interfacing. 


Storage Addressing 


All bytes of the five SEs are directly addressable by each of 
four CEs and three IOCEs. Priority and configuration 
circuits in each SE permit.the honoring of asynchronous 
and simultaneous requests for storage from all configured 
CEs and IOCEs. 


Each SE has a fixed address range that is determined by 
plug cards which are plugged at the time of installation. The 
address range for each SE is shown in Figure 2-9. In the 
event of an SE malfunction, one SE may be substituted for 
another. The address-translation capability of the 9020 
system translates logical addresses from the program to the 
correct physical addresses for the actual SE occupying that 
address range. 


Address Range ; 


000,000 - 524,287 


524,288 - 1,048,575 
1,048,576 - 1,572,863 
1,572,864 - 2,097,151 


2,097,152 - 2,621,439 


Figure 2-9. SE Address Range (Bytes) 


Storage Protection 


Each SE contains a storage protect buffer which provides a 
protection key for each contiguous block of 2048 bytes of 
storage. These keys can be set and inspected by executing 
the Set Storage Key and Insert Storage Key instructions. 
Storage protection is described more fully in Chapter 5. 


Internal Organization 


The SE is composed of two logical areas::a storage- 
switching unit (SSU) and a storage section (Figure 2-10). 


Storage-Switching Unit 
e Establishes request priority. 
e Synchronizes CE and IOCE requests. 


The SSU controls and synchronizes use of the SE’s storage 
section by a maximum of seven users: four CEs and three 
IOCEs. Two processes are involved. The first is the 
establishment of priority for each user request; this is 
accomplished by the priority selection and control logic. 
The second process entails adapting the storage section to 
the different speeds and data bus widths of the two user 
types. The CE can keep pace with the 750-ns cycle time of 
the storage section, whereas the IOCE requires a minimum 
of 2.5usec. The CE uses a doubleword data bus, whereas 
the IOCE uses a singleword bus. Further, the IOCE 
time-shares its data bus with addresses instead of using a 
separate storage address bus as does the CE. Most of the 
logic, labeled “Registers and Control Circuits” in Figure 
2-10, is devoted to adapting the storage section to the 
requirements of the two user types. 

This portion of the SSU also contains the CCR for the 
SE and the maintenance panel controls. Separate main- 
tenance panels are provided for the SSU and storage 
section. 
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Figure 2-10. Storage Element Organization 


Storage Section 

e 4BSMs, 131,072 bytes each. 

e 2 .BSMs for even doublewords. 

e 2 .BSMs for odd doublewords. 

e@ Requests interleaved between even and odd BSMs. 
e Storage protection provided in 2048 byte blocks. 


The storage section of the SE is logically divided into three 
functional areas: 

1. Basic storage modules (BSMs). 

2. Storage common controls. 

3. Storage protection circuits. 


Basic Storage Modules. Four BSMs, each with a capacity of 
131,072 bytes, are contained in the storage section. The 
BSMs are coincident-current magnetic core storage devices; 
each is a completely operational storage module and 
contains, in addition to the storage arrays, the associated 
addressing and selection logic, clock, and registers. 

Two BSMs provide storage for even-numbered double- 
words and two provide storage for odd-numbered double- 
words. This makes possible interleaving of consecutive even 
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Storage Common Controls 


Storage Protection Circuits 


Even-High Even-Low 
BSM BSM 


and odd storage cycles to obtain a shorter effective access 
time. The interleaving consists of starting a cycle for 
one-half of storage as soon as the fetch portion of the cycle 
for the other half has been completed. 


Storage Common Controls. The storage common controls 
consist of separate clocks, gating circuitry, and address 
registers for the even and odd BSMs. 


Storage Protection Circuits. This functional area of the 
storage section contains the storage-protect core array, 
together with the associated clock, registers, and gating 
logic. The core array provides for storage of a five-bit 
storage key for each block of 2048 bytes of main storage in 
the SE. 


IBM 7289-04 DISPLAY ELEMENT 
e Self-contained, self-powered unit. 


e Capable of buffering display data for four operating 
display generators. 


e Capacity of 262,144 bytes of data. 
e Battery backup power supply. 


e Store and fetch protection. 


The IBM 7289-04 Display Element (DE) is a self-contained, 
self-powered unit (Figure 2-11) that is capable of buffering 
display data received from any of four CEs and of handling 
requests for that data from up to four display generators 
(DGs) simultaneously. Each DG represents up to six 
character vector generators (CVGs), making a possible total 
of 24 CVGs that can access the DE. The honoring of the 
requests from CVGs and CEs is controlled by priority 


circuitry and the configuration control register (CCR). The 
CCR determines which CVGs and CEs will be scanned by 
the priority logic. The priority scheme is a fixed or 
“slotted” type. That is, a given device is serviced only 
during its specific time slot in the priority scan. This differs 
from the priority scanning in the SE in which various 
requesters can vie for priority at any time. 


Figure 2-11. IBM 7289-04 Display Element (DE) 
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Display data is buffered in two 131,072-byte basic 
storage modules (designated as even BSM and odd BSM) for 
a total of 262,144 bytes. Data is transferred to and from 
storage in doublewords (eight bytes). The BSM cycle time is 
800 ns; however, the two BSMs can be accessed so that, 
using two-way interleaving, a doubleword can be obtained 
every 400 ns. 

Since the BSMs use coincident current magnetic core 
storage arrays, the contents of storage are not destroyed 
under normal on/off sequences. Therefore, if the element is 
not in operation when power is removed, the stored data 
will be valid when proper power is restored to the element. 

Each DE is a completely self-contained unit with its own 
power supplies. Each is provided with a master circuit 
breaker so that ac power can be removed for maintenance 
purposes. A DE can be powered up or down without 
disturbing the operation of other elements in the system. 


Power control and maintenance panels provide for off-line 


maintenance and testing of a DE without disturbing other 
elements in the system. 

A battery backup power source in each DE permits 
operation to continue to a logical stopping point (check 
point) in the event of. loss of external power. Thus, a 
normal power-down sequence may occur even after the loss 
of external power, so that data in the DE is preserved. DEs 
are capable of operating on battery power for 5-1/2 
seconds. 


Interfacing 


@ Interfaces with up to 4 CEs and up to 8 DGs. 


@ Wrap simulates CVGs to test DE operation. 


Interconnection within the system is provided by interfaces 
to and from the CEs and DGs. An additional interface to 
the configuration console permits DE status to be displayed 
at the console panel. 

In addition to providing data and control lines for 
normal stores and fetches, the DE-CE interface provides 
controls and a “wrap” bus so that CVG requests may be 
simulated and data normally transferred to CVGs may be 
returned to the CE for comparison with original data. Thus, 
the DE can be tested without disturbing display equipment. 

Interfaces are provided for eight DGs, up to four of 
which may be configured and operated at any one time. 
Each request for data over these interfaces results in a 
quadword (16 bytes) of data being transferred to a CVG 
two bytes at a time. Timing and address lines on this 
interface permit CVG address verification and synchroniza- 
tion of data transfers. Refer to Chapter 3 for a detailed 
discussion of element interfacing. 


2-16 (7/70) 


DE Storage Addressing 


Core: storage addressés for DEs are located above the 
highest SE address, which is byte location 2,621,439 
decimal. Each DE can store 262,144 contiguous bytes, 
one-half the capacity of an SE. However, each slot in the 
address translation register (ATR) of. a CE represents a 
storage capacity equal to that of one SE; ie., 524,288 
bytes. For this reason, there are gaps in the valid addresses 
between DEs. The DEs may occupy ATR slots 6—10; slots 
1—S5 are reserved for SEs only. Each DE has a fixed address 
range which is determined by plug cards at the time of 
installation. Figure 2-12 shows the address range for each 
DE. In the event of a DE malfunction, one DE may be 
substituted for another. The address translation capability 
of the 9020 system translates logical addresses from the 
program to the correct physical addresses for the actual DE 
occupying that address range. 

DEs are addressed only by CEs. Data addresses for CVG 
requests are determined within the DE as a result of 
programming. 


i 
2,621,440 - 2,883,583 
(2, 883, 584 - 3, 145,727 invalid range) 
7 3, 145,728 - 3,407,871 
(3,407,872 - 3,670,015 invalid range) 
3 3,670,016 - 3,932, 159 
i (3,932, 160 - 4, 194,303 invalid range) 
4 4,194,304 - 4,456,447 . 
(4,456,448 - 4,718,591 invalid range) 


4,718,592 - 4,980,735 


Figure 2-12. DE Address Ranges (Bytes) 


Storage Protection 


Each DE contains a storage protect buffer which provides a 
protection key for each contiguous block of 2048 bytes of 
storage. These keys can be set and inspected by executing 
the Set Storage Key and Insert Storage Key instructions, 
respectively. Storage protection is described more fully in 
Chapter 5 of this manual. 


Internal Organization 
e Switch unit. 


e Display storage section. 


The DE may be logically divided into two major areas: the 
switch unit (SU) and the display storage section (Figure 
2-13). The latter is similar to the storage section of an SE 
except that it contains only two BSMs instead of four. 
Therefore, the storage capacity is half that of an SE. The 
SU contains the necessary logic to perform the following 
functions: 

1. Priority scanning for access requests. 

2. Interface drive and control. : 

3. Data buffering for up to four DGs. 

4. Data address buffering for 24 CVGs. 

5. Configuration control. 


6. Maintenance panel control. 
7. Wrap control. 


Priority scan logic enables the SU to establish the 
priority of requests from 4 CEs and 24 CVGs. This logic is 
further conditioned by the configuration control register. 

The SU has provision for interfacing with four CEs and 
four of the eight (maximum) attached DGs. A quadword 
data buffer register is provided for each connected DG, 
enabling the DE to simultaneously transfer data to four 
DGs and one CE. Addresses of data locations in core 
storage for each of the 24 CVGs are stored in 24 local 
storage address registers. Circuitry is provided in the SU for 
updating these addresses as the CVGs are serviced. 

The SU also contains circuitry for handling CE-initiated 
“Wrap” and “Forced” requests. This circuitry enables the 
testing of DE priority circuits and CVG interfaces from a 
CE. This is explained in Chapter 4 of the 7201-02 CE 
FETOM. 

The SU also contains a maintenance panel. 


aad Switch Unit — Dir lay Storage Section — 


Priority 
Scan 


4 CE's { 
8 DG's 
(See note) 


Wrap Bus 


DG and CVG 
Controls 

and 

Drivers 


Maintenance 
Controls 


Data Buffers 
and 
Registers 


Local 
Storage 


Storage Common Controls 


Storage Protection Circuits 


Note: Eight DG's may be attached, but only four may be 


connected and operating at one time. 


Figure 2-13. Display Element Organization 
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IBM 7265-03 CONFIGURATION CONSOLE 


e Central monitoring and control position for 9020E 
system. 


e Provides reconfiguration and error reporting paths for 
display equipment. 


e Contains two RCUs, one for backup. 


e All critical monitoring and control functions duplicated 
elsewhere in the system. 


The IBM 7265-03 Configuration Console (CC), shown in 
Figure 2-14, is the central monitoring and control position 
for the 9020E system and also provides configuration and 
error-reporting paths for display generators and radar 
keyboard multiplexers (RKMs) attached to the 9020E 
system. Configuration data paths for the IBM 2701 Data 
Adapter Units (DAUs) and a programmable data path to 
the attached System Maintenance Monitor Console (SMMC) 


Figure 2-14. IBM 7265-03 Configuration Console (CC) 
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are also provided. No redundant CC is provided because all 
critical console functions are duplicated elsewhere in the 
system. The CC is divided into two major functional areas: 
system console function and reconfiguration function 
(shown in Figure 2-15 in simplified form). 

The system console function is provided by direct 
connection to various elements and units and by an internal 
System Console Control Unit (SCCU) which supports 
programmed I/O operations for updating indicators, reading 
switches, and transferring data to the SMMC. 

The reconfiguration function is provided by duplexed 
Reconfiguration Control Units (RCUs). Each RCU is 
functionally identical, and each can perform the total 
reconfiguration task. The RCUs are also responsible for 
reporting fault or error indications received from DGs and 
RKMs. The RCUs are powered separately from the system 
console portion of the CC and are capable of being 
independently maintained. Each RCU is attached to two 
(expandable to three) IOCE multiplexer channels, and 
connections are established by configuration control from 
the controlling CE. 
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Figure 2-15. Configuration Console Functions 
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System Console Function 


The system console function logically divides into the 

following areas: 

1. Operations and controls requiring operator intervention. 

2. Program-addressable switches, indicators, alarms, and 
SMMC interface. 

3. Indicators for display of hardware-generated indications 
from various system elements and units and from 
associated display equipment. 

4. IBM 1052 Printer/Keyboards for program message input 
and output. 


These functional areas are described in the following text. 
The various switches, controls, and indicators are shown in 
Figure 2-16 which depicts the internal organization of the 
entire configuration console. 


Operator Intervention 


Controls and indicators are provided which enable the 
operator to perform an Initial Program Load (IPL), to store 
and display data, and to manually switch certain I/O 
equipment so as to connect it to any attached IOCE. The 
switched equipment consists of an IBM 2821 I/O Control 
Unit that controls an IBM 2540 Card Read/Punch and an 
IBM 1403 High Speed Printer. 

Loading, storing, and displaying are accomplished by 
selecting a CE and remotely controlling it. The configura- 
tion console does not contain circuitry to perform these 
functions directly; such functions are under control of a 
locking type SYSTEM INTERLOCK switch which has a 
removable key to prevent inadvertent interference with CE 
operation. 


Program-Addressable Areas of Console 


The SCCU has a device address of 01 which enables the 
program to access it via the multiplexer channel of any 
attached IOCE. Write commands can be issued to: 

1. Turn indicators on or off in the status register for units 
external to the DCP system, namely, DGs and RKMs. 

2. Turn indicators on or off in the configuration register to 
indicate the elements making up each subsystem of the 
current configuration. 

3. Transfer unit status messages to the System Maintenance 
Monitor Console (SMMC). 

A Read Sense Switch command can be issued by the 
program to read one byte of data that contains the setting 
of six sense switches located on the console panel. 

A Control command can be issued to activate a bell ora 
buzzer to alert the operator to program or hardware 
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abnormal conditions. The bell and buzzer can be reset from 
a pushbutton on the console panel. 

The SCCU recognizes three control commands in con- 
nection with the SMMC. One of these sets a mask that 
permits the SMMC to request unit status messages from a 
particular IOCE. The remaining commands enable the 
program to send a “help” or a “fault” signal to the SMMC 
to alert personnel to conditions in the DCP system that 
require attention. 


Hardware-Generated Indications 


Certain indicators on the CC panel are hard-wired directly 
to the elements which they represent. These are shown in 
Figure 2-16 and are as follows: 

1. An instruction address register for each CE. 

2. A one-word storage data register for the selected CE. 

3. A status register that shows the state of each element 
and major unit in the DCP system. This register also 
indicates logic and power checks for these elements and 
units. 


IBM 1052 I/O Printer/Keyboards 


Figure 2-14 shows two IBM 1052 Printer/Keyboards set 
into the reading board of the CC. The CC contains a patch 
panel for connecting these 1052’s to adapters which are 
physically housed in the CEs. The 1052’s are not otherwise 
associated with the CC. They, together with the associated 
adapters, are simply I/O devices connected to the multi- 
plexer channels. Location of the 1052’s at the CC provides 
for convenient program-operator communication via input 
and output messages. 


Reconfiguration Function 


The second major function of the configuration console is 
to provide configuration paths to the DGs, RKMs, and IBM 
2701 Data Adapter Units. In addition, status and error 
information is received from the DG and RKM units and is 
returned to the 9020E system. 

The reconfiguration function is provided by two (du- 
plexed) Reconfiguration Control Units (RCUs). Each RCU 
is physically located on an individual logic gate and has its 
own independent power system and maintenance panel. 
Each RCU is functionally identical, and either may perform 
the entire active system reconfiguration and fault-reporting 
task. 

In general, one RCU is assigned the active system task 
whereas the other is redundant and may be utilized in 
another subsystem to perform tests on nonactive units. The 
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Figure 2-16. Configuration Console Internal Organization 


9020E Introduction (7/70) 2-21 


redundant RCU may also be tested by a maintenance 
subsystem that utilizes built-in program test capabilities. 

The RCU internal organization is shown in Figure 2-16. 
It is a multi-device control unit that interprets IOCE 
commands and sequences, and controls appropriate signals 
to the display units and the DAUs. In addition, fault- 
reporting signals from the display units are scanned and 
reported to the 9020E system through the RCU to the 
IOCE. 

The RCU attaches to two IOCE multiplexer channels 
(expandable to three). IOCE connections are established by 
the controlling CE through the use of the SCON instruction 
which loads the configuration control register in the RCU. 


IBM 2701-01 DATA ADAPTER UNIT 


e Provides data and control path between IOCEs and 
RKMs. 


e Attaches to two IOCEs and up to five RKMs. 
e Configured via configuration console. 
e Self-contained unit. 


The IBM 2701-01 Data Adapter Unit (DAU), shown in 
Figure 2-17, provides a control and data path between the 


Figure 2-17. IBM 2701-01 Data Adapter Unit (DAU) 


2-22 (7/70) 


9020E system and up to five RKMs. The DAU functions as 
a control unit, transmitting data and commands between 
either of the two attached IOCEs and any of the five 
attached RKMs. The DAU, while attached to two IOCEs, 
can be logically connected only to one at a time. The actual 
operating configuration is controlled by the Configuration 
Console (CC) via an interface between the CC and the 
DAU. The EXC control program, using a Write Configura- 
tion command to the CC, specifying the DAU address, can 
isolate the DAU from the system or dedicate it to an IOCE. 
The DAU does not accept configuration to both attached 
IOCEs at one time. This configuration is invalid. 

The DAU is a self-contained unit which includes its own 
powering, operator’s panel, and controls. Off-line main- 
tenance can be performed by diagnostic programs executed 
by an IOCE cor CE or through use of an I/O test box when 
the unit is isolated from the system. 


Interfacing 


The DAU provides two standard I/O interfaces, one for 
each IOCE. The enabling and disabling of these interfaces is 
under control of the CC, as mentioned previously. How- 
ever, for maintenance purposes, provision is made for 
manual control over the interfaces when the DAU is in state 
zero, 

Interfacing with the RKMs is via a demand response type 
of interface. 

The CC-to-DAU interface is used to send state and 
interface control data for configuration, as well as a reset 
and a configuration strobe signal. The DAU-to-CC interface 
enables the CC to monitor the current status of the 
configuration register in the DAU, to determine whether 
the DAU is off line, and to determine whether a new 
configuration has been accepted. A logic check line is also 
provided which permits the CC to display a logic check 
condition on the CC operator’s panel. 

Details of DAU interfacing are presented in Chapter 3. 


Internal Organization 


The DAU can be logically divided into four functional 
units: Channel Interface (CHIF), the Two Processor Switch 
(TPS), Transmission Interface Converter (XIC), and Modi- 
fied Parallel Data Adapter (MPDA), as shown in Figure 
2-18. These four functional units operate together to 
perform all interface decoding, conversion, buffering, trans- 
mission, and control functions necessary for the successful 
operation of the RKMs with the IOCEs. 


2701-01 DAU 


Figure 2-18. DAU Internal Organization 


Channel Interface (CHIF) 


Each CHIF interfaces with an IOCE on one side and the 
DAU.-on the other. Interfacing with the IOCEs is via the 
standard I/O interface. The DAU interface is under control 
of the two processor switch. 


Two Processor Switch (TPS) 


The TPS provides for program-controlled or manual switch- 
ing of the DAU between two CHIFs (one CHIF for each 
possible IOCE). The TPS blocks signals from a CHIF to the 
DAU when that interface is disabled. When one interface is 
enabled, the TPS does not monitor the other interface. This 
philosophy allows the DAU to communicate with only one 
IOCE at a time, as dictated to the TPS by configuration 
control. 


Transmission Interface Converter (XIC) 


The XIC is that portion of the DAU that responds to signals 
from the IOCE. The XIC checks for odd parity on all data 
from the IOCE and generates odd parity for all data sent to 
the IOCE. The XIC accumulates one byte of sense data and 
one byte of status data to be sent to the IOCE. It responds 
to control unit commands and passes RKM commands to 
the MPDA. The XIC also recognizes five RKM addresses 
and accepts them from the IOCE as being valid. It generates 
any of the five addresses that will be sent to the JOCE when 
the DAU is requesting service or presenting an interrupt. 
Finally, the XIC provides a control and data path between 
itself and the MPDA. 


Modified Parallel Data Adapter (MPDA) 


The MPDA provides a control and data path from the DAU 
to the RKM. It receives commands from the XIC and 
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reformats them before sending them to the RKM. All data 
buffering and parity checking associated with RKM 
operations are performed in the MPDA. The MPDA receives 
and retains all interrupt signals received from the RKMs and 
controls their presentation to the system. As check condi- 
tions arise from the RKM interface, the MPDA generates 
the appropriate signals and sends them to the XIC. 


IBM 2803-01 TAPE CONTROL UNIT 
e Interfaces with two IOCEs. 
e Maximum of eight tape units per TCU. 


e Under configuration control. 


The IBM 2803-01 Tape Control Unit (TCU) is the 1/O 

control unit for up to eight IBM 2401-02 or IBM 2401-03 

Magnetic Tape Units (TUs). The TCU is shown in Figure 

2-19. The function of the TCU is to adapt the TUs to the 

standard I/O interface. The TCU adapts the TUs to the 

channel as follows: 

1. Converts interface line sequences and commands into 
timed pulses for TU control. 

2. Converts timed pulses from TUs into interface line 
sequences. 

3. Regulates data transmission between the channel inter- 
face and the TUs. 


Each TCU has an interface switch feature which permits 
it to be attached to two selector channels, one on each of 
two IOCEs. The interface switch provides for two inter- 


Figure 2-19. IBM 2803-01 Tape Control Unit (TCU) 
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faces, a primary and a secondary, which may be enabled by 
program means. The primary interface is also referred to as 
“Interface B” or “Interface Y”’; the secondary is referred to 
as “Interface A” or “Interface X”. Figure 2-20 shows the 
typical connection of TCUs on a system with three IOCEs. 

Each TCU contains a CCR and can be configured by any 
CE in the system via interfaces between the TCU and each 


CE. Both the interface switch and the configuration 
interfaces are shown in Figure 2-21. 

The TCU has no battery backup and no duplex power 
source. A single system may have up to three TCUs, 
however, providing redundant elements in the event of a 
malfunction. A maintenance panel is provided for off-line 
testing of the TCU itself and also of the attached TUs. 


Legend: Pri = primary interface = interface 8 = interface Y. 
Sec = secondary interface = interface A= interface X. 


Figure 2-20. Typical TCU-IOCE Connection 
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Figure 2-21. TCU-I/O Device Connection 
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e Simplex. 
e Distributed simplex. 
e Multiple driver simplex. 


Multiple driver-multiple receiver simplex. 


e Multiplex. 


Interfacing provides the means of communication between 
the various elements in the 9020 system. The data or signals 
carried on the various interfaces represent a variety of 
information: data words, configuration assignments, logout 
data, selection lines, error conditions, condition codes, 
system masks, resets, and other miscellaneous signals 
necessary for the successful operation and synchronization 
of the overall system. Some interface signals are pulses 
whereas others are represented by steady-state voltage 
levels. 

Interfacing between elements within the 9020 system is 
accomplished almost exclusively by use of 20-conductor 
coaxial cables. Each 20-connector coaxial cable is con- 
nected to each element by standard System/360 interface 
connector. Some are terminated with interface connectors 
which accommodate two 20-conductor cables (double body 
connector) for a total of 40 signals. In some cases, an 
interface connector accommodates only one 20-conductor 
cable (single body connector) for a total of 20 signals. 

The inter-element interfaces are of two basic types: 
simplex and multiplex. The simplex interfaces are essential- 
ly one-way signals; the multiplex interfaces can carry signals 
in either direction, depending on the particular driver- 
receiver combination being used at the time. The combina- 
tions are described below: 

Simplex, Figure 3-1 (a): These signals originate in one 
element and terminate in another element. The signal 
lines are, in effect, a direct one-way element-to-clement 
connection. | 

Distributed Simplex, Figure 3-1 (b): These interface 
signals originate in one element and are received by a 
number of receiving elements. The data or control 
signals are distributed to multiple elements, but, in a 
majority of cases, only one of the receiving elements is 
conditioned to accept information at a particular time. 
Figure 3-2 shows this distributed simplex usage. A 


CHAPTER 3. INTERFACE LINES 


distributed simplex interface with only one receiving 
element is logically the same as a pure simplex 
interface. 

Multiple Driver Simplex, Figure 3-1 (c): In this case, one 
receiving element is supplied by drivers in more than 
one element. Normally, only one driver is active at any 
given period of time. This type of interface is used 
‘between the CEs and configuration console. Figure 3-3 
shows an example of this type of interface. 

Multiple Driver-Multiple Receiver Simplex, Figure 3-1 
(d): This type of simplex line is a combination of 
distributed simplex and multiple-driver simplex. This 
receiver-driver combination is used for the DE Wrap 
Bus. 

Multiplex, Figure 3-1 (e): The multiplex type interface 
can pass data or signals in either direction. 

The following paragraphs describe interfacing between 
the CE, SE, DE, IOCE, DAU, TCU, configuration console, 
and I/O equipment. These descriptions are meant to include 
only the logic interfacing and do not include power supply 
interfacing. Additional details will also be found in the 
instruction and maintenance manuals for the corresponding 
elements. 

Figure 3-23 at the end of this chapter shows an overall 
view of interfacing between the various system elements. It 
has been arranged so that it can be folded out for reference 
while this chapter is read. - 


COMPUTING ELEMENT INTERFACING 


e Interfacing to and from CEs, SEs, DEs, IOCEs, TCUs, 
and CC. 


e System control. 
e Monitoring. 


The CE executes the EXC control program and is therefore 
the controlling element in the overall system. Because of 
this overall system control, the CE is in direct communica- 
tion with each of the major system elements. The com- 
munication takes many forms, including data, controls, and 
indications. 

Each of the signal lines or buses which enter or leave the 
CE is listed on the following pages. Along with each line or 
bus is a short explanation of its basic purpose or function. 
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Figure 3-1. Interface Receiver-Driver Combinations 
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Figure 3-2. Typical Distributed Simplex Interface 
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Figure 3-3. Typical Multiple Driver Simplex Interface 


CE-CE Interfacing 
e WRD and RDD direct control. 


e Data communication. 
e External starts and logouts. 
e Error monitoring. 


The CE is the only element that directly communicates 
with other elements of its kind. In a given CE, one set of 
the distributed simplex lines originates and three identical 
sets are received from the other CEs. Further, three sets of 
the simplex lines originate in a given CE, and three identical 
sets are received. This CE-to-CE communication is illus- 
trated below. 


(ee 
Dee Se 0 eee 
I iit i 
CE cE CE cE 
i 2 3 
‘ 


*For simplification, not all simplex lines are shown 
for these CEs. CE 1 is shown complete. 


The interface intercommunication is concerned 
primarily with direct control operations which include data 
communication (one byte) and external CE starts and 
logouts. In addition to the direct control function, there are 
controls for reconfiguration and element check monitoring. 
Figure 3-4 shows the CE-to-CE interface lines. 


Control Bus: This 36-bit bus is used for both configura- 
tion control and ATR assignment. 

Configuration control (established by the configuration 
mask) is used to define which elements comprise a 
subsystem and to avoid interference between subsystems. 
The configuration control registers in the various elements 
contain positions to define the other elements with which 
any given element may communicate at a given time. The 
CCR positions, or bits, enable or inhibit data and control 
paths between elements. Refer to the chapter on Configura- 
tion Control. 

ATR assignment establishes a correlation between logical 
addresses referred to by the program and actual storage 
elements within the system. 


System Reset (1, 2): A double-railed signal (two lines) 
which performs hardware resets. The reset is not gated by 
the CCR. All bits in the CCRs of major elements not in test 
are reset to 0’s except the SCON bits which are set to 1’s. 


Element Check (ELC): The ‘element check’ signal is sent 
to all CEs within the system with the exception of itself. 
This signal may result from a CCR or ATR parity error, 
certain PSBAR stepping situations, and certain hard stops 
or CE error conditions. 


Direct Out Lines: During execution of a write direct 
CE-to-CE data communication, this bus represents eight 
data bits and one parity bit fetched from a storage element. 
This byte of data remains as static signals until the next 
Write Direct instruction is executed. 


Signal Out Lines: This set of five lines is used in 
conjunction with the ‘direct out’ lines. The five commands 
which follow are sent on these lines: 


CE External Start Command: This command is issued by 
a Write Direct instruction and causes the receiving CE 
to start execution after it obtains a new PSW from 
location 00000 of its PSA. The receiving CE must be 
properly SCONed to the sending CE to perform the 
external start operation. 
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DISTRIBUTED SIMPLEX LINES AND BUSES; 
Control Bus: 


Data Formats: 


*Not Used 


Dein nae } SE's Only dSret Quit | SE's Only | p SE Only | DE Only i eaitavi DE's Only 


Seer Peeenune 
16 


DE's | E's Only | Not Used Not Used Not Used 
Bs sialic 
8 16 


Note: The configuration and ATR mask originate from the external register. The 
configuration mask signals are distributed simplex originating in a CE and 
received by one or more CE's, 

* Not Used 


Direct Control Bus: 


P Data 


Aol 
7 


0 7 


Note: This data byte is concerned with direct control. The direct data byte and ELC are 
distributed simplex originating in a CE and received by one or more CE's. 


Miscellaneous Control Lines: 


System Reset 1 
System Reset 2 
Element Check 


SIMPLEX LINES: 


1, Direct Control! Signal Lines: 
a. CE Ext. Start Command 
b, CE Ext. Stop Command 
c. CE Logout Command 
d. CE Write Direct Command 
e. CE Read Direct Command 
2. Reconfigure Select 
3. SCON/SATR Response 
4, SATR Select 


Note: These simplex signals originate from direct control and configuration control circuitry. 


Figure 3-4. CE to CE Interface Lines 
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CE External Stop Command: This command is issued by 
a Write Direct instruction and causes the receiving CE 
to perform an element reset and go to the stopped state 
with the manual light on. The receiving CE must be 
properly SCONed to the sending CE to execute the 
external stop operation. 

CE Logout Command: This command is issued by a 
Write Direct instruction to cause the receiving CE to 
initiate logout procedures. To perform the logout, the 
receiving CE must be properly SCONed to the sending 
CE and must not have machine checks masked off in 
the current PSW. 

CE Write Direct Command: This command is issued by a 
Write Direct instruction and indicates a data communi- 
cation type operation between the sending and re- 
ceiving CEs. The command causes an external interrupt 
at the receiving CE by setting a unique bit in its 
external interrupt register, provided that the receiving 
CE is properly configured (CCR 20—23) to listen to the 
originating CE. 

CE Read Direct Command: This command is issued by 
the Read Direct instruction and indicates that a byte of 
data has been taken from the direct data bus. The 
command causes an external interrupt at the addressed 
CE by setting a unique bit in its external interrupt 
register. The receiving CE must be properly configured 
(CCR 20—23) to the originating CE. 


Reconfigure Select: This line, carrying a 5.0-usec pulse, 
from the CE to another CE causes the CE to set into its 
configuration register the mask on the output bus. The CE 
will honor the select if the selector’s SCON bit is on in the 
receiving CE’s CCR. 

SATR Select: This select line signals and conditions the 
selected CE to receive the address translation assignment 
mask on the 36-bit control bus. Three select pulses are 
required, one for initial selection and two for transmission 
of ATR 1 and ATR 2. 

SCON/SATR Response: This line is sent to the CEs in 
response to configuration select, provided that the select 
was honored and the CCR parity is correct. This response 
signal is also used as a SATR response to acknowledge that 
the receiving CE was properly SCONed and that the ATR 1 
and 2 assignment masks were properly received. 


CE — SE Interfacing 
e Data transfers 
- @ Control signals 


e Error monitoring 


All main storage is located in storage elements which are 
self-contained units electrically remote from the computing 


element. Because these SEs are self-contained units, a 
complete set of buses and interlocking control signals must 
be provided to ensure proper synchronization and data 
transfer. 


CE to SE Interface 
e Addressing. 


e Data storing. 


e Configuration. 


e Control. 


The interface from the CE to an SE involves the following 
distributed simplex buses: storage data bus in (SDBIJ), 
storage address bus (SAB), mark bus, inkey bus, three 
logword number lines, and the two-line system reset. In 
addition, two groups of control lines are involved; one 
group is distributed simplex and the other is simplex 
(Figure 3-5). A description of the individual buses and lines 
follows. 

Storage Data Bus In: This group of 72 lines carries data 
and configuration information from one CE to up to five 
SEs. The accessed SE gates its receivers to accept the signals 
from the bus. Figure 3-5 shows the formats of the 
configuration information and storage data on the SDBI. 
During a SCON operation, the CE transmits the SCON 
mask over the SDBI. Note that only the unshaded portions 
(Figure 3-5) are used by the SE. The CE communication 
bits are moved from bits 52—55 to bits 56—59 by the CE. 
These bits also appear on the bus in their original locations 
but are not gated in from those positions by the SE. Note 
that the ILOS and IDES bits are used only for parity 
checking at the SE. 

Storage Address Bus: This bus consists of 19 lines 
labeled 1—19 and a parity bit for bits 1—5. Bits 1—4 specify 
the particular SE and are called the ‘box tag’. Thus, the 
P(i—5) bit is sometimes referred to as Pp, for tag parity, 
even though bit 5 actually specifies high or low storage. 
Parity for the address lines (bits 6—19) is sent separately on 
simplex lines labeled P A and Pp. 

Mark Bus: This bus consists of 8 bits (0—7) plus a parity 
bit and represents the store or regeneration control lines for 
each of the eight bytes of the doubleword accessed by the 
CE. 

Inkey Bus: This bus consists of 5 bits (O—4) plus a parity 
bit. The high-order four bits are compared with the key bits 
stored in the storage protection area of the SE. The 
low-order bit (bit 4) indicates that fetch protection is 
active. 

Logword Number: Three lines carry the logword number 
from the CE to an SE. The lines gate the logwords onto the 
storage data bus out. 
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DISTRIBUTED SIMPLEX LINES AND BUSES: 


{Positive active level) 


Storage Data Bus In (SDBI) 


SCON Mask (Note: Only unshaded portion is used by SE.) 


IDG's, oo 


*not used 


Data: 


0 7 8 15 


Storage Address Bus (SAB) and Mark Bus 


In-Key Bus: 


Miscellaneous Control Lines: 


Logword Number (3 lines) 
System Reset (2 lines) 

Set Key 

Insert Key 

Store 

Test and Set 

Cancel 

Defeat Interleave 

Defeat Interleave and Reverse Storage 
Address Compare Sync 

CE Power On 

Double Cycle 

Normal Op 


SIMPLEX LINES: 
(Negative active level) 


Select Even 

Select Odd 

Logout Stop 

Logout Select 

Logout Complete (Check Reset) 
Reconfigure Select 

Suppress Log Check 

PA 


Pp 


Figure 3-5. CE to SE Interface Lines 
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Address Bits 


SCON 


4 
2 
2 
a 


01141423374 


CE 


14243)}4 


System Reset (1, 2): These signals cause a storage reset 
when a system reset occurs. In addition to resetting the SE 
itself, the storage reset causes the SE’s CCR to be reset to 
all zeros except for parity and SCON bits which are set to 
ones. These reset lines are not gated by the CCR. 

Set Key: This signal from the CE causes an SE to 
perform a Set Key cycle; i.e., to set the protection key 
from the CE into the storage protect array. 

Insert Key: This signal causes the SE to place the key 
from the storage protect array on the out key bus. 

Store: This is a control line which permits the SE to 
perform a data store. 

Test and Set: This signal causes the SE to perform a Test 
and Set storage cycle in which a doubleword is fetched and 
regenerated into storage except for the addressed byte 
which is set to all ones before being returned to storage. 

Cancel: This signal causes the SE to regenerate the data 
fetched from storage without transferring it to the user 
element. 

Defeat Interleave: This signal indicates to the SE that 
the DEFEAT INTERLEAVE switch on the CE is active or 
the CE has been placed in defeat interleave mode via a 
Diagnose instruction. While the CE reverses SAB bits 6 and 
20 to defeat interleaving, the IOCE does not. Therefore, the 
‘defeat interleave’ signal is sent to enable the SE to reverse 
the roles of IOCE address bits 6 and 20. This is accomplish- 
ed by (1) substituting bit 20 for bit 6 when gating the IOCE 
storage address buffer to SESAR and (2) sampling bit 6 
(bus bit 14) to determine whether the access request is for 
the odd or even half of storage. 

Defeat Interleave and Storage Reverse: This signal has 
the same significance as ‘defeat interleave’ except that 
IOCE address bit 6 (bus bit 14) is inverted before it is used 
for selecting odd or even storage. 

Address Compare Sync: This signal provides a negative 
significant sync pulse for scoping when the address switches 
on the CE control panel match the SAB and the ADR 
COMPARE switch is in the normal position. 

CE Power On: This signal is raised during CE power on 
reset and falls to ground level before power goes off. It 
inhibits the output of the associated communication bits in 
the CCR of the SE. 

Double Cycle: This signal guarantees two sequential even 
or odd storage cycles by inhibiting priority scanning in the 
SSU until the second select from the issuing CE. The CE 
must issue the second select within the SE timeout period 
or the SE will issue a pulse ELC, reset the priority circuitry, 
and. become available for new requests. The SE does not 
wait for ‘logout stop’ and does not reset outstanding 
selects. 

Normal Op: This signal ensures that control bus driver or 
receiver failures do not cause multiple operation execution, 
resulting in lost data. The ‘normal op’ signal is valid with 
fetch and store operations only. If it is not sensed with 
fetch or store or if it is sensed with ‘test and set’, ‘set key’, 


‘double cycle’, ‘suppress log check’, or ‘insert key’, an 
address check is issued to the using CE, the entire SE stops, 
ELC is issued to all CEs, and the SE waits for ‘logout stop’. 

Select Even: This signal is sent to an SE to request an 
even storage cycle. 

Select Odd: This signal is sent to an SE to request an 
odd storage cycle. 

Logout Stop: This signal sets the ‘SE stopped’ latch in 
the SE, causing the SE to halt all activity at the end of the 
cycle in progress (if not already stopped). The SE issues ‘SE 
stopped’ to the using elements and a level ELC to all CEs. It 
then remains stopped until logged out, reset, or recon- 
figured. 

Logout Select: This signal is sent to the SE to request a 
doubleword of logout data. The signal is used in conjunc- 
tion with the three ‘logword number’ lines which specify 
the doubleword to be transferred. 

Logout Complete (Check Reset): The CE sends ‘logout 
complete’ to the SE at the completion of a logout and 
during a subsystem reset. The SE senses this signal as a 
check reset, and storage is reset. At the completion of the 
reset sequence, the ‘SE stopped’ latch is reset. 

Reconfigure Select: This signal causes the SE to gate 
portions of the SDBI into its CCR provided the SE is 
properly SCONed to the issuing CE. If a CCR parity error 
exists in the SE when the ‘reconfigure select’ is received or 
no SCON bits are on and the SE is not in state 0, CCR 
gating is ignored and the SE accepts the SCON data. 

Suppress Log Check: This signal suppresses ‘data’ check 
and its associated ELC signal. 

P, and Py: Parity conversion circuitry in the CE 
develops THE, and Pp parity bits for 14 of the SAB bits 
(bits 6—19) in two groups of seven bits each: Py for bits 
6—12 and Pp for bits 13-19. This parity generation takes 
into account the bit 20 and bit 6 reversal involved in ‘defeat 
interleave’ and the bit 6 inversion for ‘storage reverse’. 

Because the generation of the parity introduces several 
nanoseconds of delay, the P, and P, are sent separately to 
each SE via simplex lines rather than with the rest of SAB 
which uses a distributed simplex bus. 


SE to CE Interface 


e Data fetching. 
e Logout data. 
e Controls. 


e Error monitoring. 


The SE-to-CE interface comprises the storage data bus out 
(SDBO), the out key bus, and two groups of control lines. 
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The buses and one group of control lines are multiple-driver 
simplex lines. The remaining control lines are simplex. This 
is shown in Figure 3-6. A description of the SE-to-CE 
interface buses and lines follows. 

Storage Data Bus Out: This is a 72-bit bus that carries 
eight 8-bit bytes and the associated eight parity bits. The 
eight bytes consist of data from a normal fetch operation or 
logout information during a storage logout operation. 

Out Key Bus: This bus consists of five key bits and a 
parity bit. The high-order four bits represent the storage 
key; the low-order bit is the fetch-protect bit. The bus 
carries the key to the CE during an insert key operation. 

Advance SDBO: This is a single multiple-driver simplex 
line sent in advance of data on a fetch operation and 
together with data on all other storage cycles. It is used by 
the CE as a signal to sample for errors. 

Advance Keys: This is a single multiple-driver simplex 
line activated by the storage-protect feature in the SE 
during an ‘insert key’ cycle to allow the CE to ingate the 
key from the ‘out key bus’. 


MULTIPLE DRIVER SIMPLEX LINES AND BUSES: 


(Positive active level) 


Storage Data Bus Out (SOBO) 


Out-Key Bus: 


Miscellaneous Control Lines: 


Advance SDBO 
Advance Keys 

Protect Check 

Address Check 

Data Check 


SIMPLEX LINES: 
(Negative active level) 


Miscellaneous Control Lines: 


Accept 

Logout Advance 
Element Check 
Reconfigure Accept 
SE Stopped 

Logout SE Stopped 
SE Ready 

SBO Gate 


Figure 3-6. SE to CE Interface Lines 
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Protect Check: This is a single multiple-driver simplex 
line activated by the storage-protect feature of the SE when 
the protection key and the storage key do not agree during 
a normal store or fetch operation. . 

Address Check: This is a single multiple-driver simplex 
line activated by the SE when any of the following 
addressing errors occur: mark parity, address parity, tag 
parity, tag mismatch, multi-accept condition, storage- 
protect parity, inkey or out-key parity or an invalid op 
error. This signal is always accompanied by a pulse ELC. 

Data Check: This is a single multiple-driver simplex line 
activated by a storage data parity error unless inhibited by 
‘suppress log check’. 

The following control lines are simplex lines: 

Accept: This signal indicates that the SE has received a 
‘select’ from the CE and has started the storage cycle. 

Logout Advance: ‘Logout advance’ is sent to alert the 
CE that logout data is available on the SDBO. 

Element Check (ELC): ELC may be a pulse or a level. It 
is sent to all CEs, regardless of configuration, when an error 


or other abnormal condition occurs at the SE. 

Pulse ELC is coincident with CCR parity error, tempera- 
ture out of tolerance check (OTC), ‘on battery’ signal, and 
storage check, address check, or data check. 

Level ELC is coincident with overvoltage or overcurrent 
condition, power off or power check, and ‘SE stopped’. 

Reconfigure Accept: This signal indicates to the CE that 
the SE has loaded the reconfiguration data from the SDBI 
into the CCR and that good parity exists. 

SE Stopped: This signal is issued to all configured CEs to 
indicate that the SE has stopped in response to a ‘logout 
stop’ (LOS) signal from a CE or IOCE. This signal inhibits 
all operations except logout, reconfiguration, and reset. 

Logout SE Stopped: This simplex line has the same 
timing as ‘SE stopped’ except that it is not degated in 
Diagnose Logout mode. It enables the CE to store the final 
word of the SE logout and allows correct operation of CE 
SCI logout controls after the rise of ‘logout complete’. 

SE Ready: This signal indicates to the using element that 
the SE is available; i.e., the SE has power up, is not in test, 
is properly configured, and is not being reset. 

SBO Gate: This signal is used by the CE to identify the 
SE. 


CE-DE Interfacing 
e Data transfer. 
e Reconfiguration data transfer. 


e Simulation of CVG requests. 


Display data may be wrapped back to CE for checking. 
e Control. 
e@ Error monitoring. 


The CE-DE interface has three major purposes: 

1. Allows data transfers for store and fetch operations and 
for reconfiguration. 

2. Simulates the request capability of 24 CVGs so that the 
priority circuitry in the DE can be tested. 

3. Allows data normally transferred to the CVGs to be 
returned to the CE via the wrap bus for validity 
checking. 


Most of the interface lines are the same as the storage 
element interface and are used in the same way to allow the 
DE to perform as a storage device. Additional interface 
lines implement the priority and CVG data-checking 


facility. The additional lines consist of 12 lines from the CE 
to the DE and a 19-line bus from the DE to the CE, as 
follows: 


CE to DE: 
CVG REQUEST (6 lines) 
DG Selected (4 lines) 
Wrap (1 line) 
Set Force Request (1 line) 
DE to CE: 
Wrap Bus (19 lines) 
CE to DE Interface 


-e@ Data transfer. 


e Reconfiguration data transfer. 
e Simulation of CVG requests. 


e Control and error monitoring. 


The CE to DE interface involves a number of distributed 
simplex buses and control lines as well as a group of 
simplex buses and control lines. All distributed simplex 
lines are positive at the active level except for ‘system 
reset’. The simplex lines are negative at the active level 
except for ELC. Figure 3-7 shows the distributed simplex 
and simplex lines, together with data formats, for the buses. 
A description of each bus and control line follows. 

Storage Data Bus In: A group of 72 lines carrying data 
and configuration information from one CE to one of four 
DEs. The accessed DE gates its receivers to accept the 
signals from the bus. During a SCON instruction, the DE 
gates 27 bits of data plus 4 parity bits from the SDBI into 
its CCR. Figure 3-7 shows the format of the configuration 
data on the SDBI. Only the unshaded portion is used by the 
DE. 

Storage Address Bus (SAB): The SAB consists of 19 
lines labeled 1—19 and a parity bit for bits 1—5. Bits 1—4 
specify the particular DE and are called the “‘box tag”. For 
this reason, the P(1—5) bit is sometimes referred to as P. 
for tag parity, even though bit 5 is not included in the tag. 
Parity for the address lines (bits 6—19) is sent separately on 
simplex lines labeled P A and PR: 

Mark Bus: This bus consists of eight bits (0—7), plus a 
parity bit, and represents the store or regeneration control 
lines for each of the eight bytes of the doubleword accessed 
by the CE. 

Inkey Bus: This bus consists of five bits (0Q—4) plus a 
parity bit. The five bits are compared with the key bits 
stored in the storage-protection area of the DE. 

Logword Number: Three lines carry the logword number 
from the CE to a DE. The lines gate the logwords onto the 
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DISTRIBUTED SIMPLEX LINES AND BUSES: 


(Positive active levet) 
Storage Data Bus In (SDB) 7 : 


SCON Mask (Note: Only unshaded portion is used by DE) 


of} {24344 - 


Address Bits 


In-Key Bus: 


Miscellaneous Control Lines: 


Logword Number (3 lines) 
System Reset (2 lines) 
CVG Request {6 lines) 
DG Selected (4 lines) 
Set Key 


Insert Key 

Store 

Test and Set 

Address Compare Sync 
CE Power On 


Double Cycle 
Normal Op 
Wrap 

Set Force Request 


SIMPLEX LINES: 


(Negative active tevel) 


Select Even Logout Complete (Check Reset) 
Select Odd Reconfigure Select 

Logout Stop Pa 

Logout Select Pp 


Figure 3-7. CE to DE Interface Lines 
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‘storage data bus out’ under CE control. They are always at 
the zero state when not in use. 

System Reset (1, 2): These signals cause a storage reset 
when a system reset occurs. In addition to resetting the DE 
itself, the storage reset causes the DE’s CCR to be reset to 
all zeros except for parity and SCON bits which are set to 
ones. These reset lines are not gated by the CCR. 

CVG Request (6 lines): These lines are used by the CE 
to simulate CVG requests. They are made active by the CE 
executing a Diagnose instruction and remain active until 
reset by the CE. 

DG Selected (4 lines): These lines are used by the CE, 
executing a Diagnose instruction, to select any combination 
of four of the eight DG interfaces in the DE. The ‘DG 
selected’ lines are used in conjunction with ‘wrap’ and ‘set 
force request’, all under control of the Diagnose instruc- 
tion. 

Set Key: This is a signal from the CE causing a DE to 
perform a ‘set key’ cycle; i.e., to set the protection key 
from the CE into the storage protect array. 

Insert Key: This signal causes the DE to place the key 
from the storage protect array on the ‘outkey bus’. 

Store: This is a control line that permits the DE to 
perform a data store. 

Test and Set: This signal causes the DE to perform a test 
and set storage cycle in which a doubleword is fetched and 
regenerated into storage except for the byte specified by 
the R1 field which is set to all ones before being returned 
to storage. 

Address Compare Sync: This signal provides a negative 
significant sync pulse for scoping when the:address switches 
on the CE control panel match the SAB and the ADR 
COMPARE switch is in the normal position. 

CE Power On: This signal is raised during CE power-on 
reset and falls to ground level before power goes off. It 
inhibits the output of the associated communication bits in 
the CCR of the DE. 

Double Cycle: This line is not used at the DE except to 
check ‘normal op’. 

Normal Op: This signal ensures that control bus driver or 
receiver failures do not cause multiple operation execution, 
resulting in lost data. The ‘normal op’ signal is valid with 
fetch and store operations only. If it is not sensed with 
fetch or store or if it is sensed with ‘test and set’, ‘set key’, 
or ‘insert key’, an ‘address check’ is issued to the using CE, 
the entire DE stops, ELC is issued to all CEs, and the DE 
waits for ‘logout stop’. 

Wrap: By executing a Diagnose instruction, the CE uses 
the ‘wrap’ signal in conjunction with the ‘DG selected’ 
signals to gate one of the four DG/DE interfaces to the 
‘wrap bus’ and to initiate ‘wrap’ requests. 

Set Force Request: This signal is used by the CE, 
executing a Diagnose instruction, to initiate simulated CVG 
requests. 


Select Even: This signal is sent to a DE to request an 
even storage cycle. 

Select Odd: This signal is sent to a DE to request an odd 
storage cycle. 

Logout Stop (LOS): This signal sets.the ‘DE stopped’ 
latch in the DE, causing the DE to halt all activity at the 
end of the cycle in progress (if not already stopped). The 
LOS signal must be issued by a CE in conjunction with the 
first ‘logout select’ to establish logout priority and must 
remain active throughout the logout procedure to retain 
priority. Upon receipt of LOS, the DE issues ‘DE stopped’ 
to the using elements and a level ELC to all CEs. It then 
remains stopped until logged out, reset, or reconfigured. 

Logout Select: This signal is sent to the DE to request a 
doubleword of logout data. The signal is used in conjunc- 
tion with the three ‘logword number’ lines which specify 
the doubleword to be transferred. 

Logout Complete (Check Reset): The CE sends ‘logout 
complete’ to the DE at the completion of a logout and 
during a subsystem reset. The DE senses this signal as a 
check reset, and storage is reset. At the completion of the 
reset sequence, the ‘DE stopped’ latch is reset. 

Reconfigure Select: This signal causes the DE to gate 
portions of the SDBI into its CCR provided the DE is 
properly SCONed to the issuing CE. If a CCR parity error 
exists in the DE when the ‘reconfigure select’ is received or 
no SCON bits are on and the DE is not in state 0, CCR 
gating is ignored and the DE accepts the SCON data. 

P, and Pp: Parity conversion circuitry in the CE 
develops the P, and Pp parity bits for 14 of the SAB bits 
(bits 6—19) in two groups of seven bits each. P a is the 
parity bit for bits 6—12; Pp is the parity bit for bits 13-19. 

Because the generation of the parity introduces several 
nanoseconds of delay, P A and Pp are sent separately to 
each Lis via simplex lines rather than with the rest of SAB 
which uses a distributed simplex bus. 


DE to CE Interface 

e Data fetching. 

e Logout data. 

e Display data via ‘wrap bus’. 

e Controls. 

e Error monitoring. 

The DE to CE interface consists of a number of buses and 
control lines which are multiple-driver simplex; i.e., drivers 


in up to four DEs share the bus to a given CE. In addition, a 
group of control signals are sent via simplex lines. Figure 
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3-8 shows the buses and lines grouped according to whether 
they are multiple-driver simplex or pure simplex. Individual 
buses and lines are described below. 

Storage Data Bus Out (SDBO): The SDBO consists of 72 
lines (64 data bits and 8 parity bits) which are used to 
transfer data from the DE to the CE during a fetch or 
logout operation. 

Outkey Bus: This bus consists of five data bits and a 
parity bit. The bus is used to transfer the key bits from the 
storage protect array in the DE to the CE during an insert 
key operation. It is multiple-driver simplex. 

Wrap Bus: This bus is a 19-bit wide, multiple driver- 
multiple receiver simplex bus used to return or wrap data, 
which normally goes to CVGs, to the CE for checking 


MULTIPLE DRIVER SIMPLEX LINES AND BUSES: 
(Positive Active Level) 


Storage Data Bus Out (SDBO): 


purposes. This path is also used to check the DE/DG 
interfaces and DE control logic without the use of the DG. 
The first two bits are for timing; these are the ‘data sample 
timing’ line and the ‘word sync timing’ line. The third bit is 
the ‘CVG address’ line. The remaining 16 lines (labeled 
0—15) constitute the data bus itself. 


Note: The ‘wrap bus’ is like the DE to DG interface. 
Additional information may be found under the heading 
“DE Interfacing” later in this chapter. 


Storage Data Check: This multiple-driver simplex line 
indicates a storage data parity error to the CE. It is 
accompanied by a pulse ELC to all CEs. 


8 5 16 23 (24 31 32 39 = «40 47 48 55 56 63 


0 7 


Out-Key Bus: 


Miscellaneous Control Lines: 


Storage Data Check 
Storage Address Check 
Advance SDBO 
Protect Address Check 
Advance Keys 


MULTIPLE DRIVER-MULTIPLE RECEIVER SIMPLEX LINES; 


i Display Data 
0 


15 


Wrop Bus: 


A = Data Sample Timing 
B = Word Sync Timing 
C = CVG Address 


Note: More than one DE connects 
to more than one CE via this bus. 


SIMPLEX LINES: 
(Negative Active Level Except ELC) 


SBO Gate 

Accept 

Logout Advance 
Element Check 
Reconfigure Accept 
DE Stopped 

DE Ready 


Figure 3-8. DE to CE Interface Lines 
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Storage Address Check: This is a multiple-driver simplex 
line which indicates to the CE that one of the following 
errors has occurred: mark parity, address parity, key parity, 
box-tag parity, box-tag mismatch, or multi-accept. All of 
these are associated with storage addressing. A storage 
address check is accompanied by a pulse ELC to all CEs. 

Advance SDBO: Advance SDBO is a single multiple- 
driver simplex line that is activated by the DE in advance of 
data out on the SDBO for all storage cycles. 

Protect Address Check: This is a multiple-driver simplex 
line that is activated by the storage-protect portion of the 
DE to indicate to the CE that the keys do not match during 
an attempted store or an attempted fetch from a fetch- 
protected location. 

The following control lines are simplex: 

SBO Gate: This signal is used by the CE to identify the 
source of data on the SDBO during a fetch cycle. 

Accept: This signal indicates that storage has been 
started in response to the CE’s request (select). 

Logout Advance: This signal is sent to the CE to indicate 
that logout data is valid on the SDBO. 

Element Check (ELC): This signal is sent to all CEs 
(regardless of configuration) to alert them that an abnormal 
condition has occurred. Unlike other simplex lines from the 
DE, the ELC signal, which may be a pulse or a level, is 
positive when active. 


Pulsed ELCs are coincident with: 
. CCR parity error 
. Temperature out of tolerance (OTC) condition 
. On battery supply (OBS) 
. Logic check: 
Data parity check 
Address, mark, key, or box-tag parity check 
Box-tag mismatch 
Normal-op check 
Multi-accept check 
Refresh parity check 
DG data register parity check 
Local store parity check 


kRwWN 


Level, or static, ELCs are coincident with: 
. Power check or power down 
2. DE stopped 


— 


Reconfigure Accept: This signal indicates to the CE that 
the DE has loaded the CCR with reconfiguration data from 
the SDBI and that correct parity and no redundancy check 
exists. A redundancy check results when an attempt is 
made to configure more than one data register to a DG 
register or vice versa. A redundancy check inhibits 
‘reconfigure accept’ but does not cause an ELC. 


DE Stopped: This signal indicates to all configured CEs 
that the DE is stopped for logout. It results from the setting 
of the ‘DE stopped’ latch which inhibits all operations 
except logout and reconfiguration. 

DE Ready: This signal indicates to the CE that the DE is 
available for use. Specifically, it indicates the DE has power 
on, is not in test, is not configured away from the particular 
CE, and is not being reset. 


CE-IOCE Interfacing 


The 9020E system includes a maximum of three IOCEs, 
each of which controls one multiplexer channel and up to 
three selector channels. All system communication (except 
configuration) with I/O units is accomplished through the 
IOCEs by means of the following I/O instructions: 

Start I/O 

Test I/O 

Halt 1/O 

Test Channel 

Set PCI 


Because all I/O operations are initiated by I/O instruc- 
tions, the CE must have control over the IOCEs. Any CE 
can control any IOCE. One CE may have several IOCEs 
on-line (configured)at one time. However, communication 
between a CE and the IOCEs is in an interleaved manner, 
allowing an operation between the CE and only one IOCE 
at a given instant. On the other hand, any IOCE may be 
under control of only one CE at a time. 

During I/O operations, certain control signals pass 
directly between the CE and IOCE via the CE-IOCE 
interface; control information is passed between the CE and 
IOCE via main storage. During execution of an I/O 
instruction, the CE signals the selected IOCE which channel 
and unit are to be selected and which of the I/O 
instructions is to be executed. The CE also transmits a 
quantity called the preferential storage base address (PSBA) 
which indicates to the IOCE which preferential area 
contains the CAW, CSW, PSWs, and other critical control 
information. The CAW and CSW locations are used for 
CE-IOCE communication. Upon completion of the I/O 
instruction, the IOCE transmits a value to be placed in the 
CE’s condition code register. Subsequent CE instructions 
may be used to test the condition code to determine the 
result of the I/O instruction. 

I/O interruptions are also controlled over the CE-IOCE 
interface. The CE transmits the system mask portion of its 
current PSW to the IOCE. The IOCE uses the system mask 
to gate the channel interruption conditions when signaling 
its controlling CE of an outstanding interruption. At the 
end of its current instruction, the CE supplies the PSBA 
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and signals the IOCE to proceed with the interruption. At 
this time, the IOCE performs the highest priority pending 
interruption that is not masked off. After the CSW has been 
stored, the IOCE stores the associated channel and unit 
address and a portion of the system mask in the proper 
location in main storage to partially form the old PSW for 
the I/O interruption. Upon completion of the channel 
portion of the interruption, the IOCE signals the CE to 
complete the interruption. 

The CE-IOCE interface is also used to perform other 
specific functions such as IPL, FLT load, logout, start I/O 
processor, and direct control. 


CE to IOCE Interface 

e Configuration control. 

e ATR control. 

e [I/O instructions. 

e Start I/O processor. 

e Direct control. 

e IPL controls. 

@ FLT load controls. 

e 1[/O and MC interrupt controls. 
e Logout controls. 


e No data transfer. 


Interfacing for the CE to IOCE includes a control bus and 
associated signal lines. The control bus transfers informa- 
tion such as configuration masks, ATR assignment masks, 
PSBAR indications, IPL and FLT operations, I/O instruc- 
tions including Start I/O Processor, and direct control 
commands such as Write Direct Processor Start, Stop, or 
Interrupt. The control bus is never used to transfer data. 
Control signals define the information on the control bus 
and synchronize the operations. The various lines and buses 
are shown in Figure 3-9 and are described below. 

Control Bus: This bus contains 36 multiplexed lines: 32 
bit positions plus 4 parity bits. It services the configuration 
control register, address translation register, I/O processor, 
I/O instructions, IPL, logout, interrupt signals, and FLTs. 
1. ‘Reconfigure select’ and ‘SATR select’ use the bus to set 

the configuration control register or the address transla- 

tion register. 
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2. I/O instructions use the bus to transmit the channel and 
unit address, preferential storage base address (PSBA), 
and the I/O instruction identification. 

3. IPL and FLT load use the bus for the channel and unit 
address and PSBA. 

4. Logout uses the bus for PSBA only. 

. ‘Permit interruption’ uses the bus for PSBA only. 

6. ‘Start I/O processor’ uses the bus to transmit a storage 
key and an address. 


a) 


System Reset (1, 2): This is a I-ms. signal which 
precedes a system IPL. The ‘system reset’ is sent on two 
lines. Line 1 must go negative and line 2 must go positive 
simultaneously to cause the reset. These lines are not gated 
by the CCR. 

When active, the ‘system reset’ performs hardware and 
microprogram resets in the IOCE provided the Test switch 
is not on. ‘System reset’ causes the CCR to be reset to zeros 
except for the SCON bits which are set to all ones. 

Subsystem Reset (1 line): This line is activated by the 
CE to cause the IOCE to do an element reset. To be 
effective, the IOCE must be properly configured to the 
sending CE. The IOCE does-not reset its CCR as a result of 
‘subsystem reset’. 

System Mask Bits 16—19: These lines are sent to all 
IOCEs and are used to form the first portion of PSW byte 2 
on channel interrupts. See also system mask bits under 
simplex lines. 

360 Mode Operation: This signal causes the IOCE to 
operate in the 360 mode. IOCE 1 must be configured to CE 
1. 

The following lines are all simplex: 

I/O Instruction: This line is sent to a selected IOCE. The 
preferential storage base address, unit address, channel 
address, and the decoded I/O instruction are placed on the 
control bus. The I/O instruction line is then brought up to 
tell the IOCE to take the information from the control bus. 
The line remains static until a response is received from the 
IOCE. 

FLT Load: This line is not used by the CE in the 9020E 
system. The ‘initial program load’ line is used during the 
performance of an FLT load from a CE. 

Initial Program Load: This line, generated in the same 
manner as an I/O instruction, indicates to the selected 
IOCE that it is to perform an IPL. The control bus contains 
the preferential storage base address and the unit and 
channel address when this line is brought up. 

Permit I/O Interrupt: This line is sent to the IOCE in 
response to an IOCE [/O interrupt request. This signal 
allows the IOCE to store its CSW and interrupt code field 
of the PSW. 

Logout: This line is issued from a Write Direct instruc- 
tion and causes the IOCE to begin a logout operation. The 
IOCE must be SCONed to the sending CE. 


DISTRIBUTED SIMPLEX LINES AND BUSES: 


Control Bus: 


Unit Address 


Unit Address 


Not Used 


State SCON SE F 
Sas) a : 
O,1}1 424344 142)3{/4]5 Be: 


PSW Address 


The control bus is 36 bits time-shared by the above formats. 
Miscellaneous Distributed Simplex Lines: 


System Reset (2 lines) System Mask Bits 16 - 19 (4 lines) 
Subsystem Reset (1 line) 360 Mode 


SIMPLEX LINES: 


1/O Instruction 

FLT Load (not used in 9020 D/E) 
Initial Program Load 

Permit |/O Interrupt 

Logout 

Peconfigure Select 


Onr won — 


Figure 3-9. CE to IOCE Interface Lines 


Channel 
Address 


Channel 
Address 


Not Used 


Not Used Permit 


(/O Interrupt 


and Logout 


Not Used 


Start (/O 
Processor 


System Mask Bits 


. Permit Machine Check Interrupt 
. FLT Backspace 

. SATR Select 

. Write Direct Start 

. Write Direct Stop 

. Write Direct Interrupt 
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Reconfigure Select: ‘Reconfigure select’ consists of three 
lines, one to each IOCE. Each line is generated from the 
select mask and gates the configuration bits from the 
control bus into the IOCE. The IOCE must have the issuing 
CE’s SCON bit on. 

System Mask: The system mask lines are static lines 
from the CE’s PSW register bits O—6 and 16—19. These 
lines mask the channels in the IOCEs and are distributed as 
follows: 

PSW bits O—3 to IOCE 1 

PSW bits 4—6, 16 to IOCE 2 

PSW bits 17—19 to IOCE 3 

PSW bits 16—19 to all IOCEs 


Bits 16—19 are sent to all IOCEs and are used in forming 
the first portion of PSW byte 2 on channel interrupts. 
However, these bits (16—19) are sent via distributed 
simplex lines. 

Permit Machine-Check Interrupt Request: A line sent to 
configured IOCE in response to a machine-check interrupt 
request. This signal allows the IOCE to continue with the 
logout. 

FLT Backspace: This signal causes the IOCE to branch 
from its wait loop and backspace the FLT tape over one 
record. When the operation is completed, an ‘FLT com- 
plete’ signal is returned to the CE. 

SATR Select: This line signals and conditions the 
selected IOCE to receive the new address translation 
assignment mask on the 36-bit control bus. Three select 
pulses are required, one for initial selection and two for 
transmission of ATR | and ATR 2. 

Write Direct Start: This line causes an IOCE processor to 
leave the stopped state and go to either the running or wait 
state. This signal is sent to the IOCE when the CE executes 
an SIOP instruction. When SIOP is sent, the control bus has 
data in the format labeled “Start I/O Processor” as shown 
in Figure 3-9. 

Write Direct Stop: This line causes an IOCE processor to 
go to the stopped state at the end of the current processor 
instruction. 

Write Direct Interrupt: This signal causes an external 
interrupt of an IOCE processor. 


IOCE to CE Interface 
e Control signals. 

e Request signals. 

e Error signals. 


e No data transfer. 
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Interfacing from the IOCE to the CE is concerned primarily 
with control-type signals. The control bus, which transfers 
information from the CE to the IOCE, is strictly a one-way 
bus and performs no functions in this section. Programming 
restrictions allow an IOCE to be configured only to one CE 
at a time. Figure 3-10 shows the IOCE to CE interface lines. 


DISTRIBUTED SIMPLEX LINES: 


Condition Code 
SCON/SATR Response 
Response 

. Check Response 

. Reset ROS Timeout 
PSA Lockout 

FLT Complete 

Write Direct Interrupt 
TIC 

Gap 

Element Check (ELC) 


dis 
2. 
3. 
4 

5 

6. 
7. 
8, 
9, 
0. 
1. 


] 
] 


SIMPLEX LINES: 


. On Battery Signal (OBS) 

. Out of Tolerance Check (OTC) 

. 1/O Interrupt Request 

. Machine Check Interrupt Request 


Figure 3-10. IOCE to CE Interface Lines 


Note: Although the IOCE is cabled to 1052 Adapters which 
are physically located within the CEs, this interconnection 
is not part of the IOCE to CE interface. These adapters 
constitute devices on the multiplexer channels and use the 
standard I/O interface. Refer to “IOCE-Channel Interfac- 
ing” in this chapter for further information. 


Condition Code: Two lines sent to the CEs as the result 
of an I/O operation, indicating a value to be set into the 
PSW. 

SCON/SATR Response: A response sent to the CE after 
the SCON instruction has been accepted and the IOCE has 
set its CCR without detecting a parity error in the CCR. 
This response signal is also used as a set address translation 
response to acknowledge that the receiving CE was properly 
SCONed and that the ATR 1 and ATR 2 assignment masks 
were properly received. 

Response: A line sent to the CE to indicate that the 
condition code for an I/O operation is present, IPL is 
complete, I/O interruption is complete (CSW and the 
interrupt code field of the old PSW are stored), and 
machine check interrupt is complete (CLU logout). 

Check Response: A signal line to the CE, indicating that 
a parity check has been detected in the IOCE on data from 
the CE via the control bus. 


Reset ROS Timeout: A signal sent to the CE, indicating 
that the IOCE will process the I/O instruction but is 
presently processing data. The signal resets the CE’s 
countdown loop to its maximum value, preventing it from 
timing out. 

PSA Lockout: A line indicating that the IOCE tried to 
access the PSA but did not receive a reply from the storage 
element accessed or that the PSA access was issued to a 
logout-stopped SE. This signal causes a program interrup- 
tion in the CE. 

FLT Complete: A response to the CE indicating that the 
FLT backspace request has been completed. 

Write Direct Interrupt: This line is used by the I/O 
processor to signal the CE to take an external interrupt. 

TIC: This signal is sent to the CE to indicate that a 
Transfer In Channel (TIC) command has been encountered 
in the channel. It is used by the CE when running FLTs. 

Gap: This line is sent to the CE to indicate that the 
channel has encountered an inter-record gap; i.e., the end of 
a tape record. The CE uses this signal when running FLTs. 

Element Check: This signal is issued by an IOCE as a 
pulse whenever a parity error is detected in the ATR or an 
error condition is detected that requires a CLU or selector 
channel logout. 

The ‘element check’ signal is issued as a level if, during a 
CLU logout, the IOCE detects a condition which will not 
permit logout to be performed. An element check signal 
causes an external interrupt in the CE. 

On Battery Signal (OBS): This signal, when issued as a 
static condition to the CE, indicates that the IOCE is 
operating on its battery supplies. The ‘OBS’ is issued as a 
pulse whenever CCR parity is detected during execution of 
the SCON operation in the JOCE. This signal causes an 
external interrupt in the CE. 

Out of Tolerance Check (OTC): A signal to the CE, 
indicating that the IOCE temperature-sensing thermals have 
detected an out-of-bounds temperature. This signal causes 
an external interrupt in the CE. 

I/O Interrupt Request: A signal from the IOCE, inform- 
ing the CE of status changes in the channels or I/O devices. 
When a status change is detected by the IOCE and the 
channel is masked on, an I/O interrupt request is sent to the 
CE. The channel which requested the interrupt waits for a 
“permit I/O interrupt” from the CE before storing a 
channel status word which indicates the reason for the 
interrupt request. 

Also stored are the channel and unit address, IOCE 
address, mask bits 16—19, and the interruption code in the 
old PSW. If-the channel control check or the interface 
control check bit is on in the CSW, a selector channel 
logout has been performed. 

Machine Check Interrupt Request: The detection of a 
CLU error by an IOCE causes the IOCE to stop and request 
a PSBA for logout via the ‘machine check interrupt 
request’. 


A CE in an I/O instruction or interrupt process with the - 
IOCE issuing the machine check interrupt request termin- 
ates the process and proceeds to the next I-fetch. That 
I-fetch, or any I-fetch, has an exception branch to a special 
microprogram routine. This routine issues a “permit 
machine check interrupt” and enters a timing loop while 
the IOCE performs a logout. The IOCE holds up “‘reset 
time out” while logging out. The CE waits for a response 
line or, in the event of further IOCE error, a timeout. In 
either case, the CE completes a ‘machine check interrupt’ 
by storing and fetching the correct PSWs. No logout occurs 
in the CE. The old PSW contains the IOCE identity in the 
interrupt code as follows: 


Bit 
IOCE 30 31 
1 0 1 
2 1 0 
3 1 1 


A timeout condition should always be accompanied by 
an IOCE element check. Simultaneous I/O interrupt re- 
quests for MC interrupt from multiple IOCEs are serviced in 
priority of IOCE 3, 2, and 1. 


CE-TCU Interfacing 


Interfacing lines between the CE and the TCU, for the most 
part, represent configuration, system resets, and element 
checks. Other than these lines, there is no control or data 
flow directly to or from the CE. Figure 3-11 shows 
interface lines and buses between the CE and the TCU. 


CE to TCU Interface 
e Configuration. 


e System reset. 


Configuration Mask: Only the required 11 positions of the 


overall ‘configuration mask’ are sent to the TCUs. The 


items sent include the two state bits, and four-bit SCON 
field for reconfiguration, and the three-bit field to define 
the controlling IOCEs. Two parity bits are used in the 
transfer. 

System Reset (1, 2): This signal results from depression 
of the SYSTEM RESET pushbutton on the CE or from a 
system IPL. It causes a hardware reset to the TCU. The 
reset is not gated by the CCR. All bits in the CCR are reset 
to zeros except the SCON bits which are set to all ones. 

Configuration Select: A line that carries a 5.0-usec pulse, 
causing the TCU to set the ‘configuration mask’ into its 
CCR. The TCU honors the select if the selector’s SCON bit 
is on in the receiving TCU’s CCR. 
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DISTRIBUTED SIMPLEX LINES AND BUSES: 


Configuration Mask (from CE): 


System Reset (2 lines from CE) 


Note: The configuration mask originates from the external register in 


the CE; the reset lines originate from control circuitry. These 


lines are distributed simplex origination in one CE and 
terminating in one or more TCU's. 


SIMPLEX LINES: 


Element Check (ELC) (from TCU's 1, 2, and 3) 


MULTIPLEX LINES: 


Configuration Select/Response (from TCU's 1, 2, and 3) 


Note: These three lines have both a driver and a receiver at each end 


of the line. 


Figure 3-11. Interface Lines between CE and TCU 


TCU to CE Interface 
e Element check. 
e Configuration response. 


Element Check: A level simplex signal is sent from each 
TCU to all CEs when one of the following occurs: parity 
check in the CCR or power failure. 

Configuration Response: A line sent to the CE in 
response to ‘configuration select’ if the select was honored 
and the CCR parity was correct. 


CE-Configuration Console (CC) Interfacing 

e Switch and indicator lines for control and monitoring of 
CE from CC. 

e Configuration control interface for RCUs. 


‘e RCU malfunction monitoring. 


The CE-CC interface may be thought of as divided into two 
sections: 

1. CE control and indication 

2. RCU configuration and monitoring 


The greater portion of the interface is concerned with the 
first of these; that is, with sending indication (status) signals 
from the CE to the CC and control signals from the CC to 
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the CE. The CE cannot initiate data transfer directly to the 
CC via this portion of the interface. Subsystem configura- 
tion indications, for example, which are under program 
control, are initiated by the CE and handled as a normal 
I/O operation via the IOCE. 

Except for the line ‘subsystem load’, this first portion of 
the interface is like the interface between a CE and the 
system console in a CCC system. The remaining portion is 
concerned with configuration, control, and monitoring of 
the two Reconfiguration Control Units (RCUs) in the CC. 
Specifically, this portion of the interface consists of the 
‘configuration data bus’, ‘reconfigure select/response’ lines, 
and the ‘system reset’ lines from the CE to the RCUs, 
together with the ‘element check’ lines from the RCUs to 
the CE. 


CE to CC Interface 

e Address indications. 

e State indications. 

e Register indications. 

e Error or condition indications. 


Configuration data to RCUs. 


Many of the indications from the CE to the CC represent 
the current status of the CE. The most important dynamic 
indications include the state of the CE, logic checks, 
current instruction address, and manual and wait status. In 
addition to lines indicating the status of the CE, there are 
lines concerned with configuration control for the RCUs. 
These include the ‘configuration data bus’, the ‘reconfigura- 
tion select/response’ lines, and the ‘system reset’ lines. The 
‘system reset’ lines from CE to CC are strictly for resetting 
the RCUs. The CE to CC lines and buses are shown in 
Figure 3-12 and are individually described below. 

Data Indicator Lines: These 36 multiple-driver simplex 
lines provide for the display of four bytes of data from a 
main or local store location. They originate in the CEs at 
the T-Register. 


MULTIPLE-DRIVER SIMPLEX LINES AND BUSES: 


Data Indicator Lines (T-Register): 


Miscellaneous Lines: 


1. Load Indicator 
2. Invalid Selection 


DISTRIBUTED SIMPLEX LINES AND BUSES: 


Configuration Data Bus: 


System Reset (2 lines) 


SIMPLEX LINES AND BUSES: 


Instruction Counter (IC) Indicator Lines: 


Address 


Miscellaneous Simplex Lines: 


1. Manual Indicator 

2. Wait Indicator 

3. State Three Indicator 
4. State Two Indicator 


MULTIPLEX LINES: 


Reconfiguration Select/Response (2 lines) 


Figure 3-12. CE to Configuration Console Interface Lines 


Load Indicator: This multiple-driver simplex line origi- 
nates in one or more CEs and turns on a common indicator. 
The indicator is lit by the respective CE from the time an 
IPL operation starts until it is complete. 

Invalid Selection: This multiple-driver simplex line 
originates in one or more CEs and turns on a common 
indicator. The selected CE lights the indicator whenever an 
invalid or illegal storage address is specified by the operator 
during a manual operation. 

Configuration Data Bus: This bus is an 11-bit distributed 
simplex bus which conveys the ‘configuration mask’ for the 
RCUs to the CC during execution of the SCON instruction 
by the CE. 

System Reset (1, 2): These two distributed simplex lines 
provide a reset to the RCUs when activated by the CE. 


. State One Indicator 

. State Zero Indicator 

. Logic Check Indicator 
. Power Check 

. Battery 
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Instruction Counter (IC) Indicators: These 27 simplex 
lines provide the CC with data for the display of the current 
instruction address at the CE. One set of these lines is 
indicated at the CC for each CE. 

Manual Indicator: These simplex lines originate in each 
CE and terminate in a unique indicator at the CC to 
indicate when the associated CE is in the stopped state. 

Wait Indicator: These simplex lines originate in each CE 
and terminate in a unique indicator at the CC to indicate 
when the wait bit in the associated CE’s PSW is set to 1. 

State Indicators: These four simplex lines originate in 
each CE and terminate in unique indicators at the CC. Only 
one of these four signals will always be active to reflect the 
present status of the originating CE. 

Logic Check Indicator: These simplex lines originate in 
each CE and terminate in a unique indicator at the CC to 
indicate that the CE has detected one of its own logic check 
conditions. 

Power Check: This signal line indicates that the tempera- 
ture in the CE has drifted to within approximately 10% of 
the shutdown tolerance. The signal also indicates the loss of 
voltage or a normal power-off (but not an element master 
power-off) condition. 

Battery: This signal indicates that the CE has switched 
to battery power. 

Reconfiguration Select/Response: These two multiplex 
lines are used by the CE to signal the two RCUs to gate 
data from the configuration data bus into the CCRs. 


Note: This same line is used by the RCU to respond to the 
SCON and may also be considered part of the CC to CE 
interface. Note also that there are physically three ‘recon- 
figuration select/response’ lines because the same circuitry 
is used for the RCU SCON bus in the CE as would be used 
for the three PAMs in a CCC system. Only two of the three 
are used by the RCUs. 


CC to CE Interface 

e Controls to CEs are gated by system interlock. 
e Distributed simplex control lines. 

e Simplex ELC lines from RCUs. 


Ali CC controls to the CEs are gated by the system 
interlock switch which requires a key operation to activate 
the logic. CC operations require that the CE test switch be 
off. In addition, all functions going to the CE (except for 
“all stop”) are further gated in the appropriate CE by a 
‘select CE’ signal that originates from the select CE rotary 
switch on the system console. 
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One simplex ELC ‘line originates from each RCU. The 
interface lines are shown in Figure 3-13 and are described 
below. 

Address Keys: These 24 signal lines (+3 parity) result 
from the 24 instruction address keys on the CC and provide 
addressing of any addressable local store or main storage 
location. 

Data Keys: These 32 signal lines (+4 parity) result from 
the 32 storage data keys on the CC and provide manual 
data for storing into any addressable local store or main 
storage location. 

CE Select: These four select lines result from the 
four-position rotary switch at the CC. Proper CE selection 
is under switch card control in the receiving CEs. This signal 
provides the necessary gating in the CEs for all manual 
operations (except ‘‘All Stop”) issued from the configura- 
tion console. The system interlock (key) switch must be 
turned on for this select switch to be enabled. 

Stop: This signal places the selected CE in the stopped 
state without destroying its environmental status. The 
selected CE proceeds to the end of the instruction being 
executed at the time the ‘stop’ is initiated. If the current 
instruction causes a program interrupt, the change of 
program status words (PSW) will be accomplished before 
the stop. An I/O device will be allowed to complete its 
operation although I/O or external interrupts will not be 
recognized. 

Start: This signal starts the selected CE. If ‘start’ is 
issued after a manual stop, the CE continues as if no stop 
occurred. 

Store Select Main: This signal results from the storage 
select switch being in the main storage position and causes 
main storage addressing at the selected CE during either 
fetch or store manual operations. This signal line is not 
active with the storage select switch in the local store 
position and causes local storage addressing at the selected 
CE. 

Display: This signal causes the selected CE to place the 
contents of a storage location, specified by the address keys 
and storage select switch, onto the data indicator lines to 
the CC. 

Store: This signal causes the selected CE to store the 
contents of the CC storage data keys in the storage location 
specified by the 24 address keys and the storage select 
switch. 

Set Instruction Counter (IC): This signal transfers the 
contents of the CC address keys to the instruction counter 
of the selected CE. 

Interrupt: This signal results from depression of the 
interrupt key and causes a ‘console interrupt’ signal which 
sets bit 25 in the PSW of the selected CE. 

Address Compare Stop: This line conditions the selected 
CE so that any storage access to the address specified in the 
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DISTRIBUTED SIMPLEX LINES AND BUSES: 


Address Keys: 


Address 


Miscellaneous Lines: 


CE Select (4 lines) 
Stop 

Start 

. Storage Select Main 

. Display 

. Store 

. Set IC 

. Interrupt 

. Address Compare Stop 


l. 
2. 
3. 
4 
5 
6 
7 
8 
9 


SIMPLEX LINES: 


Element Check (1 line from each RCU) 


Figure 3-13. Configuration Console to CE Interface Lines 


CC address keys causes the CE to enter the stopped state at 
the end of the instruction that made the memory reference. 

Address Compare Loop: This line causes the selected CE 
to loop between the address set in the CC address keys and 
the address set in the storage data keys. When the selected 
CE makes a storage access to the address specified in the 
address keys, an unconditional branch is made at the end of 
the instruction to the address specified in the storage data 
keys. Programming can establish a loop condition between 
the two sets of keys. 

Rate: This signal operates with the selected CE and the 
start and stop keys on the CC. With this signal, each 
depression of the start key causes one complete instruction 
to be executed. Any machine instruction can be executed 
in this mode. 

Load: This signal line initiates an IPL in the selected CE. 

Subsystem Load: This line allows a subsystem IPL to be 
initiated from the CC. 


Load Unit Address Bits: These eight signal lines (+ 
parity) result from two of the three rotary-type load unit 
switches on the CC. These two hexadecimal characters 
provide an I/O unit address for use during IPL operations. 

Load Channel Address Bits: These four signal lines (+ 
parity) result from one of the three rotary-type load unit 


. Address Compare Loop 

. Rate 

. Load 

. Subsystem Load 

. Load Unit Address (9 lines). 

. Load Channel Address (5 lines) 
. Load Storage Select (5 lines) 

. Activate 

. Control CE (4 lines) 

. All Stop 


switches on the CC. This hexadecimal character selects one 
of the 11 possible channels on the 9020 system. 

Load Storage Select Bit: These four signal lines (+ 
parity) result from a rotary main storage select switch on 
the CC. This hexadecimal character represents a main 
storage element to be selected during IPL or manual 
operations. 

Activate: This signal causes the SCON bits at the 
selected CE to be set according to the setting of the control 
CE switches on the CC. 

Control CE: These four signal lines (+ parity) result from 
individual switches on the configuration console and allow 
manual setting of the SCON bits in the configuration 
register. Actual setting of the SCON field occurs with 
depression of the active key on the CC. 

All Stopped: This signal causes all CEs to enter the 
stopped state. The system interlock switch must be turned 
on to activate the all-stop key, but the setting of the select 
CE switch does not affect this operation. 

Element Check: This simplex line is used to set a bit in 
the diagnose accessible register (DAR) in the CE when one 
or more of the following conditions exist at the RCU: 

1. Power failure 
2. Parity check in the CCR 
3. Out of tolerance check (OTC) 
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An interruption is taken by the CE if the associated 
RCU bit is not masked off in the DAR mask and bit 7 of 
the PSW is not masked off. One ELC line originates in each 
RCU. 


1/O CONTROL ELEMENT INTERFACING 


e Interfacing to and from CEs, SEs, TCUs, and configura- 
tion console (CC). 


e [/O control and data transfer. 
e Monitoring. 


The IOCE is primarily concerned with the movement of 
data to and from the I/O equipment. The IOCE is therefore 
connected to the control units and SEs to act as a control 
and synchronizing element in the transfer of data into and 
out of main storage. 

Communication with the CE is necessary for the 
initiation, control, and monitoring of the various I/O 
operations. This communication is strictly concerned with 
control; there is no data transfer between thé IOCE and CE. 

Data transfer is also accomplished between the IOCE 
and the printer, punch, reader, 1052, and CC. Each of these 
devices has an assigned unit address and can be controlled 
by the main program via the IOCE multiplexer channel. 

Control of IOCE-processor operations is a secondary 
function of an IOCE. Interface lines involving the IOCE 
processor are between the CE and IOCE and have been 
described previously. 

Communication with the CC is also concerned with the 
static indication of the four IOCE element states and two 
check conditions on the CC operator’s panel. 


IOCE-CE Interfacing 
All of the various signals and buses which exist between the 
IOCE and CE have been explained under “Computing 


Element Interfacing”. References to this interfacing can be 
seen in Figures 3-9 and 3-10. 


IOCE-SE Interfacing 

e Data transfer one word at a time. 

e Control signals. 

e Error monitoring. 

IOCE-SE interfacing, while similar to CE-SE interfacing, is 
not the same. The differences arise primarily because the 
IOCE storage data path is one word wide rather than a 


doubleword like the CE and because the IOCE time-shares 
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that data path with addresses rather than having a separate 
address bus as does the CE. 

Other differences appear because the IOCE cannot 
perform certain operations, such as Set Storage Key or 
SCON, which the CE performs. However, the basic simi- 
larity remains in that the interface provides for data 
transfers and control signals to and from storage and for 
error monitoring. 


IOCE to SE Interface 
e Addressing. 

e Data storing. 

e Control. 


The interface from the IOCE to the SE involves a 
distributed simplex bus, which is time-shared between 
addresses and data, and a group of distributed simplex 
control lines. In addition, a group of simplex lines are used 
to transmit control signals. The IOCE to SE interface lines 
are shown in Figure 3-14 and are described below. 

Data, Address, Keys In Bus (called “Output Bus” at 
IOCE): This is a 36-bit distributed simplex bus which is 
time-shared by two different formats, as shown in Figure 
3-14. Note that the address format is shown twice because 
the bits are relabeled at the SE. The upper format shows 
the bits as they are labeled at the IOCE; the lower format 
shows them as they are labeled at the SE. During the initial 
portion of a storage cycle, the IOCE sends the address to be 
accessed together with a key (bits O—3) to be compared 
with the protect key in the storage protect array in the SE. 
On a store operation, the data to be stored is sent on the 
same bus later in the cycle, after the IOCE has received 
‘accept’ from the SE. 

During the time the bus is used for address and keys, the 
unused bits (4—7) are always zero. When the address is for a 
PSBAR access, the key bits are forced to zero and the key 
parity bit is forced to one to maintain odd parity in the 
first byte. 

The address consists of 24 bits labeled 0 to 23. Bits 1—4 
are box-tag bits which are compared against a jumper card 
in the storage switch unit (SSU) portion of the SE to ensure 
that the correct SE has been accessed. Bits 21—23 are used 
as a three-bit binary code to specify the byte to be set to all 
ones during a Test and Set operation. 

Normal Op: This line is a distributed simplex line that is 
raised by the IOCE whenever a store or fetch cycle is 
requested. It ensures that control bus driver or receiver 
failures do not cause multiple operations to be executed at 
the same time with attendant loss of data. If it is not sensed 
with fetch or store or if it is sensed with any other 
operation (Test and Set, Suppress Log Check, or Double 
Cycle), the entire SE is stopped. In this case, a ‘storage 
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DISTRIBUTED SIMPLEX LINES AND BUSES: 
(Positive active level except Normal Op) 


Data, Address, Keys in Bus: 
(Called "Output Bus" at IOCE) 


Address Format (IOCE) 
Address Address 


Address Format (SE) 


Spare Address Address 
(Unused) 


Data Format 


0 7 #68 


. When bus is used for keys and address, bit positions 4-7 (first byte) are always 0. 
. During PSBAR access, Key bits are forced to 0 and key parity to 1. 
. During Test and Set operation, address bits 21-23 (SE address format) constitute a 
three bit binary code indicating which one of the eight bytes is to be fetched and set to all 1's. 
. Address bits 1 to 4 (SE address format) are Box Tag bits supplied for comparison against a 
jumper card in the SSU portion of the SE, 
5. Address format shown for both IOCE and SE because bits are relabled at SE. 


Miscellaneous Lines: 
1. Normal Op (Negative Active Level) 
2. Double Cycle 
3. I|OCE Power Bit Interlock (Called "IOCE to SE Power Good" at IOCE) 


SIMPLEX LINES: 
(Negative active level except Store) 


1OCE Marks (5 lines): 
(Called "Byte Stats” 
at |OCE) 


0123 


Miscellaneous Lines: 
1. Access Request 4, Logout Stop 7. FLT Load 
2. Test and Set 5. Ignore Errors 8. Store 
3. Split Cycle 6. Suppress Log Check 


Figure 3-14. IOCE to SE Interface Lines 
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check’ is sent to the IOCE and a ‘pulse ELC’ is sent to all 
CEs. The wait timeout for ‘logout stop’ will occur. 

' Double Cycle: This distributed simplex line is activated 
by the IOCE to request two sequential storage cycles, both 
even or both odd. This is done during immediate 
instructions NI, OI, and XI. If the IOCE does not generate 
the second request within the SE timeout period, a ‘pulse 
ELC’ is sent to all CEs. When this occurs, all ‘access 
requests’ are cleared; the SE does not wait for ‘logout stop’ 
but becomes immediately available for access. 

IOCE Power Bit Interlock (called “IOCE to SE Power 
Good” at the IOCE): When active, this distributed simplex 
signal allows the SE to set its ‘request’ latch and the 
associated ‘response’ latch for that IOCE. When power goes 
down on a configured IOCE, this line goes negative and 
degates the appropriate IOCE receivers to eliminate errors. 

The following IOCE to SE lines are simplex. 

IOCE Marks (called “Byte Stats” in IOCE): Five simplex 
lines convey the four “Byte Stats’ and the “Byte Stat 
parity bit” to the SE. These become the IOCE Marks and 
are analogous to the Marks sent from a CE. The IOCE 
Marks indicate the bytes to be stored during a store 
operation. There is no signal on these lines except during a 
store operation. The IOCE Mark parity (Byte Stat Parity) 
bit maintains odd parity; a parity check from these lines is 
ORed with SE Mark Parity check. 

Access Request: This simplex line is raised by the IOCE 
to request priority from the SSU for a storage cycle. It rises 
at the beginning of the first machine cycle associated with a 
storage cycle and stays active until the request has been 
accepted by the SE. 

Test and Set: This simplex line signals the SE to fetch 
the data byte specified by address bits 21, 22, and 23 (bus 
bits 29, 30, and 31) and, after transmitting it to the IOCE, 
to force this byte to all ones on the regeneration cycle. All 
other bytes are regenerated as read out. 


Note: Three bits are required to specify one of the four 
bytes addressed by the IOCE because the SE fetches a 
doubleword at a time and must actually select one of eight 
bytes. 


Split Cycle: This signal is not used by the SE but is 
terminated by it. 

Logout Stop (LOS): This simplex line is used by the 
IOCE to set the ‘SE stop’ latch at the end of the current 
storage cycle to allow the CE to proceed with a logout. 
Higher priority elements are prevented from accessing the 
SE. The LOS signal is sent from the IOCE when a data 
check occurs on a fetch or a storage check occurs. 

Ignore Errors: This signal is not used by the 7251-09 SE 
to alter any storage operation. It is used only in normal op 
checking logic. 
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Suppress Log Check: This signal prevents the SE from 
sending out error signals resulting from data check logic. No 
‘storage check’ or ‘ELC’ is sent when a data error is 
detected and ‘suppress log check’ is active. 

FLT Load: This signal is not used by the SE but is 
terminated by it. 

Store: This line is sent with ‘access request’ to notify the 
SE that a store operation is being requested. It must drop 
before the IOCE can take part in the SE priority scan. The 
IOCE can participate in the priority scan immediately if the 
line is inactive (fetch operation requested). 


SE to IOCE Interface 
e Data transfer. 
e Control. 


e Monitoring. 


The SE to IOCE interface is primarily concerned with the 
transfer of data from storage to the IOCE during a fetch 
operation. A multiple-driver simplex bus provides this data 
path. In addition, a group of simplex lines provide for 
control and error monitoring. The interface is shown in 
Figure 3-15, and the lines and buses are described here. 

Data Bus Out (called “Input Bus” at IOCE): ‘Data bus 
out’ consists of 36 lines (32 data bits and 4 parity bits) and 
is a multiple-driver simplex bus from one or more SEs to 
each IOCE. It provides for the transfer of four bytes of data 
at a time during a fetch operation. 

The following lines are all simplex. 

Accept: This signal is sent to the IOCE to indicate that 
the SE has accepted the IOCE access request and to request 
that the IOCE place data on the bus if the request was for a 
store operation. 

Request Acknowledged: This signal is sent to the IOCE 
to indicate that the SE has recognized a request from that 
IOCE and that the SE is properly configured to the 
requesting IOCE. 

Gate Data: This signal indicates to the IOCE that data is 
available on the “data bus out’. 

Storage Check: This signal is sent to the IOCE to 
indicate that one of the following errors has been detected 
in the SE: 

1. Parity check on IOCE Marks (Byte Stats), Key, Address, 
or Data. 

2. Box-tag mismatch or parity 

3. Invalid operation (Normal Op Check) 

4. Multi-accept 


The ‘storage check’ also causes a ‘pulse ELC’ to be sent to 
all CEs and starts the ‘wait timeout’. 


eee) 


SIMPLEX LINES AND BUSES: 


(Positive active level) 


Data Bus Out: 
(Called "Input Bus" at LOCE) 


Miscellaneous Lines: 


. Accept 

. Request Acknowledged 
. Gate Data 

. Storage Check 

. Protect Check 

. SE Stopped 


Figure 3-15. SE to IOCE Interface Lines 


SE Stopped: This signal indicates to the IOCE that the 
SE is being logged out. ‘SE stopped’ inhibits all operations 
except logout, reconfiguration, and reset, which are CE- 
initiated operations. 


IOCE-Channel Interfacing 


e Standard IBM System/360 I/O interface. 
e Selector channel interface with TCUs and CTCs. 


e Multiplexer channel interface with 1052 adapters, 
DAUs, and CC. 


The IOCE channels use the standard IBM System/360 I/O 
interface. A brief description of channel and unit intercon- 
nection is given here, but the standard I/O interface is not 
discussed in detail. For further information, refer to the 
“Standard I/O Interface Summary” heading in this chapter. 

Selector channels provide the only communication 
between the JOCEs and the Tape Control Units (TCUs) and 
between the IOCEs and the channel-to-channel adapters 
(CTCs). No other data or control lines exist between these 
elements. . 

The TCUs are each provided with a two-channel switch 
which enables them to be connected to either of two 


‘channels. These channels each emanate from a different 


IOCE, so that a backup data path is provided to each TCU. 
A TCU can only be logically connected and operating with 


one channel at a given time. The enabling and disabling of 
these two channels are under configuration control via the 
program. 

The CTCs provide communication between the CCC 
system and the DCP system by allowing rapid transfer of 
large blocks of data from a storage element in one system 
to that in the other system. A CTC is physically housed 
within an IOCE and is powered by the host channel. It 
appears as a control unit to both the host channel and the 
channel in the other system. All interfacing between the 
adapter and the channels is via the standard I/O interface. 

Each IOCE also contains a multiplexer channel with 
which it communicates with the 1052 adapters, the 2701 
data adapter units (DAUs), and the configuration console 
(CC). 

The 1052 adapters are physically housed within the CEs. 
However, these adapters are not directly associated with the 
CEs, except for power, but are connected to the IOCEs via 
the multiplexer channel. The additional interface between 
the 1052 adapters and the 1052’s themselves is described 
under the heading “1052 Adapter-1052 Interfacing” near 
the end of this chapter. 

The IOCE-DAU interface is also via the multiplexer 
channel. No additional data or control paths exist between 
these two elements. Each DAU is. provided with a two- 
processor switch (TPS) which allows it to be connected to 
two IOCEs. The design of the DAU is such that even 
though two IOCEs are attached, only one can be logically 
connected and operating. The enabling and disabling of 
these interfaces are under configuration control via the 
configuration console over a separate DAU-CC interface. 


9020E Introduction (7/70) 3-27 


The IOCE also communicates with the CC and witha 
number of devices via the CC. The greater portion of this 
IOCE-CC communication is via the multiplexer channel by 
means of the standard I/O interface. This is discussed in the 
following text. 


IOCE-Configuration Console Interfacing 
e IOCE status information to CC. 


e Data interfaces via multiplexer channel between JOCE 
and console indicators and sense switches, System 
Maintenance Monitor Console, and printer and card 
reader/punch. 


e Configuration interfacing via multiplexer channel and 
RCUs from IOCE to DGs, RKMs and RKM/Rs, and 
DAUs. 


e Error reporting via RCUs and multiplexer channel to 
IOCE for DGs and RKMs. 


Several signals are sent directly to the CC from the IOCE to 
activate indicators on the console panel. These indicators 
represent the status of the IOCE dynamically and are not 
under program control. The lines are described below: 

Element State: Four lines from each IOCE, representing 
the four element states (O—3), permit the state of each 
IOCE to be indicated at the CC panel. 

Logic Check: This signal is sent from an IOCE when a 
logic check occurs. A separate logic check indicator is 
provided on the CC panel for each IOCE. 

Power Check: This signal is sent to the CC from an IOCE 
when one of the following occurs: 

1. Normal power off. 
2. Power down due to a ‘power check’. 
3. Temperature out of tolerance check (OTC) which occurs 

when the temperature in the IOCE drifts to within 10% 

of the shutdown tolerance. 


Note: ‘Power check’ signal is not sent during element 
master power-off. 


Battery: A line from each IOCE is used to signal the CC 
when an IOCE switches to battery backup power. This line 
activates a single indicator which is common to all elements 
in the system having battery backup. One or more elements 
switching to battery operation cause the indicator to light. 

All other interfacing between the IOCE and the CC is via 
the multiplexer channel. For purposes of discussion, the CC 
may be divided into three different areas with regard to 
multiplexer channel interfacing: 


3-28 (7/70) 


1. System Console Control Unit (SCCU) 
2. I/O switch for 2821 
3. Reconfiguration Control] Unit (RCU) 


The SCCU, acting as an I/O control unit, interfaces with 
the IOCE via the multiplexer channel on one side and 
provides gating and control for two interfaces on the other 
side. One of these two outboard interfaces is to and from 
the console indicators and sense switches located on the 
front of the CC. A Write command may be performed by 
the multiplexer channel to the indicators, causing a 
program-controlled pattern of lights to be displayed. The 
audible bell and buzzer may also be activated in this way or 
a Read command may be performed to read one byte of 
data from the sense switches. 

The other SCCU interface is to the System Maintenance 
Monitor Console (SMMC) which is located remotely from 
the CC. This interface constitutes a data path between the 
IOCE and the SMMC. Details of this interface may be 
found under “Configuration Console Interfacing” later in 
this chapter. 

An ENABLE/DISABLE switch is provided for the SCCU 
so that it may be taken off-line if desired. 

The second area of the CC through which the IOCE 
communicates via the multiplexer channel is the I/O switch 
for the 2821. This is a rotary switch on the panel of the CC 
which provides for the connection of the 2821 Control 
Unit (which controls the 1403 Printer and the 2540 Card 
Read/Punch) to any available IOCE. An ENABLE 
pushbutton is provided to enable the particular IOCE 
interface once it has been selected by the rotary switch. 
Within the CC, the multiplexer channel passes through and 
is gated by the SCCU before going to the 2821. This 
permits the SCCU maintenance panel to be used to test the 
printer and card read/punch. Beyond these controls, 
interfacing conforms strictly to standard I/O interface 


operation. 
The third area of interest with regard to IOCE-CC 


multiplexer channel interfacing is the RCU. Two RCUs are 
contained within the CC, but only one need be discussed 
since they are identical. Either or both may be placed 
on-line with the IOCE interface, using the 
ENABLE/DISABLE switches provided. In addition to this 
switch control, the RCU is under configuration control, 
much as a TCU is. 

This multiplexer channel interface to the RCU is used by 
the IOCE to transfer configuration data to the RCU for 
subsequent control of DGs, RKMs and RKM/Rs, and 
DAUs. It is also used to receive error reports relayed from 
the DGs and the RKMs. DAUs do not report errors through 
the RCU since they directly interface with the multiplexer 
channel. Again, all interfacing between the IOCE and the 
RCU is via the standard I/O interface. The outboard 


interfaces (RCU-DG and RCU-RKM) are discussed under 
“Configuration Console Interfacing” later in this chapter. 


SE INTERFACING 

e Interfacing to and from CEs and IOCEs. | 
e Interfacing to CC. 

e Data transfer. 

e Monitoring and control. 


The storage element, as has been previously stated, is 
directly interfaced with both the CE and IOCE. This 
interfacing is concerned primarily with the transfer of 
information in the form of data and instructions to and 
from these two major elements. In addition, control signals 
provide the proper timing and synchronization for the 
intercommunications. For information regarding SE-CE 
interfacing, see Figures 3-5 and 3-6 and the associated text. 
For SE-IOCE interfacing, see Figures 3-14 and 3-15 and the 
associated text. 

SE-CC interfacing is one-way, from the SE to the CC. 
This interface is via simplex lines that have positive active 
levels. The ‘power check’ and ‘battery’ signals are 24V 
signals developed from relay logic. SE-CC interfacing 
provides the current status of the SE to the CC where it is 
displayed in the status indicators. These indicators 
represent the status of the SE dynamically and are not 
under program control. The SE to CC interface lines are 
described below. 

Element State: Four lines from each SE, representing 
the four element states (O—3), permit the state of each SE 
to be displayed at the CC panel. 

Logic Check: This line indicates that a data check, 
address check, storage check, or protect check has occurred 


at the SE. 
Power Check: This signal is sent to the CC when one of 


the following occurs: 

1. Normal power off. 

2. Power down due to power check. 

3. Temperature out of tolerance check (OTC) which occurs 
when the temperature in the SE drifts to within 10% of 
the shutdown tolerance. 


Note: ‘Power check’ signal is not sent during element 
master power-off. 


_ Battery: A line from each SE is used to signal the CC 
when an SE switches to battery backup power. This line 
activates a single indicator which is common to all elements 
in the system having battery backup. One or more elements 
switching to battery operation cause the indicator to light. 


DE INTERFACING 

e Interfacing to and from CEs and DGs. 
e Interfacing to CC. 

e Data transfer. 

e Monitoring and control. 


The interface between the DE and the CE is primarily 
concerned with the transfer of data between the two 
elements. Additional lines provide control signals for 
synchronization of the data transfer and for various special 
operations. This is discussed under the heading ‘“CE-DE 
Interfacing’. 


DE-DG TaterPice 


The DE also interfaces with the DGs to complete the data 
path from the DCP system to the displays. Thus, the 
DE-DG interface is primarily concerned with the transfer of 
display data to the DGs as they request it. Nineteen lines 
carry this data, and the associated timing and control 
signals, to the DG from the DE. Six lines carry the requests 
for data from each DG to the DE; six lines are required 
because the DGs request data for six character vector 
generators (CVGs), and the requests must specify the 
particular CVG for which the data is intended. Further, 
eight DGs may be attached to one DE, although only four 
may be configured at any one time. Thus, the DE can 
service 24 CVGs via the four DGs. 

The interface lines from the DE to the DG are described 
below. 

Display Data (16 lines): Data is transmitted in 16-bit 
halfwords, over these lines, to the DG. Eight of these 
halfwords (two doublewords) are transmitted for each data 
request. Odd parity is maintained on a doubleword basis; 
i.e., the one bits of the first and fifth halfwords are parity 
bits for the two doublewords. 

CVG Address (1 line): Upon honoring of a CVG request 
for data, the DE transmits an address code to the DG over 
this line to identify the CVG for which the subsequent data 
is intended. This is a three-bit code (plus odd parity) that is 
transmitted serially at a 4.4-MHz rate. The fourth address 
bit preceded the first data transfer by 225 ns. To prevent 
address parity errors from occurring between successive DG 
services when there is not a CVG address to be sent to the 
DG, a logical ‘“‘one”’ bit is sent in the address parity position 
of each 900-ns clock period. The CVGs are addressed 1 
through 6, binary 001 through 110, plus odd parity. 

Data Sample Timing (1 line): This line carries a 4.4-MHz, 
free-running clock signal to the DG which is used to strobe 


9020E Introduction (7/70) 3-29 


out address and data bits at a 225-ns per bit transfer rate. 
This signal is used in conjunction with the ‘word sync 
timing’ signal. 

Word Sync Timing (1 line): This line carries a 1.1-MHz 
free-running clock signal which is used to indicate the start 
of a CVG address transfer or the-transfer of the first 16 bits 
of a 64-bit doubleword of data. 

The only interface lines from the DG to the DE are the 
‘data request’ lines which are defined below. 

Data Request (6 lines): One of these lines is raised by 
the DG to request data for a particular CVG. There is one 
discrete line for each CVG attached to the DG. The DE 
priority circuitry scans each line once every 21.6 usec and 
awards access to the associated CVG if its line is active. 


DE-CC Interface 


The DE also interfaces with the configuration console (CC). 
This interface is one-way from the DE to the CC and 


consists of simplex lines having positive active levels. The . 


‘power check’ and ‘battery’ lines are 24V signals developed 
from relay logic. These DE-to-CC interface lines are 
described below. 

Element State: Four lines from each DE, representing 
the four element states (O—3), permit the state of each DE 
to be displayed at the CC panel. 

Logic Check: This line is activated by the DE when a 
logic check occurs to allow the logic check condition to be 
indicated on the CC panel. 

Power Check: This signal is sent to the CC when one of 
the following occurs: 

1. Normal power off. 

2. Power down due to power check. 

3. Temperature out of tolerance chéck (OTC) which occurs 
when the temperature in the DE drifts to within 10% of 
the shutdown tolerance. 


Note: ‘Power check’ signal is not sent during element 
master power-off. 


Battery: A line from each DE is used to signal the CC 
when a DE switches to battery backup power. This line 
activates a single indicator which is common to all elements 
in the system having battery backup. One or more elements 
switching to battery operation causes the indicator to light. 
TCU INTERFACING 
e Interfacing to and from CEs and IOCEs. 


e Interfacing to configuration console. 


e Standard I/O interface for IOCE communication. 
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e Data transfer. 
e Control and monitoring. 


TCU interfacing between the CEs is primarily concerned 
with reconfiguration, resets, and element checks. Data 
bytes are not transmitted between the TCU and the CE. An 
explanation of the appropriate signal lines can be found 
under the heading “Computing Element Interfacing”’. 

Interfacing between the TCU and the IOCE is based on 
the standard I/O interface. For further information, refer to 
the “Standard I/O Interface Summary” heading. 

Interfacing between the TCU and the configuration 
console is on a one-way basis, consisting of the following 
signals. 

Element State: Four lines from each TCU, representing 
the four element states (0—3), permit the state of each TCU 
to be displayed at the CC panel. 

Logic Check: This signal is sent from a TCU to the CC 
when a logic check occurs at the TCU. 

Power Check: This signal is sent to the CC when one of 
the following occurs: 

1. Normal power off. 
2. Power down due to power check. 
3. Temperature out of tolerance check (OTC) which occurs 

when the temperature in the TCU drifts to within 10% 

of the shutdown tolerance. 


Note: ‘Power check’ signal is not sent during element 
master power-off. 


These signals from the TCU dynamically indicate its 
status and are not under program control. Note that 
because the TCU has no battery backup there is no 
‘battery’ signal. 


DAU INTERFACING 

e Interfacing with IOCE, CC, and RKMs. 
e Data transfer. 

e Configuration. 


The 2701 Data Adapter Unit (DAU) provides the interface 
between the DCP System and the radar keyboard 
multiplexers (RKMs). Figure 3-16 shows this interface in 
simplified form. The DAU interfaces with two IOCEs on 
one side and with five RKMs on the other. Inside the DAU, 
a Two Processor Switch (TPS) is provided to permit the 
attachment of two IOCEs. The RKMs also have two 
interfaces so that they can be attached to two DAUs. One 
additional DAU interface, with the configuration console 
(CC), supplies configuration data to control the TPS in the 


Mpx 


Console 


Intf Intf 
A B 


DAU 


2701-01 pote 


Figure 3-16. DAU Interfacing 


DAU; this determines to which IOCE the DAU is logically 
connected. The A and B interfaces of the RKMs are also 
controlled by the CC via a separate interface, which is 
discussed under “Configuration Console Interfacing” later 
in this chapter. 


DAU-IOCE Interface 


The DAU-IOCE interface uses the multiplexer channel. 
Data-handling and error-reporting are strictly according to 
the standard I/O interface operation. For further 
information about the standard I/O interface, refer to the 
heading ‘“‘Standard I/O Interface Summary”. 


DAU-CC Interface 


The DAU-CC interface provides the CC with the same 
status and alarm indications as do the interfaces between 


Configuration 


Logical connection 
shown, not cabling. 


Intf Intf 
A B 
RKM 


other system elements and the CC. However, the DAU-CC 
interface differs from the others because of the additional 
facility that is provided for configuration control of the 
DAU. The DAU-CC interface lines for status and alarm 
indications are: 


Element State (0O—3) 
Logic Check 

Power Check 

Ready 


4 lines 


The lines for configuration control are: 


State Bits (SO and S1) 
Enable Interface A 
Enable Interface B 
Configuration Strobe 
Reset 


2 lines 
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The lines for configuration response from the DAU to the 
CC are: 

Configuration Accept 

Interface A Enabled 

Interface B Enabled 
These interface lines are described below. 

Element State: Four lines from each DAU, representing 
the four element states (0-3), permit the state of each 


DAU to be displayed at the CC panel. 
Logic Check: This signal is sent to the CC when a logic 


check occurs in the DAU. It is used only to light the logic 


check indicator on the CC panel. 
Power Check: This line is active whenever a power check 


occurs in the DAU. It is used to light a power check 
indicator on the CC panel. 
Ready: This line is active 
program-configurable via the CC. 
State Bits (SO and S1): These two lines encode the state 
which the DAU is to enter upon being configured by the 


CC; 
Enable Interface A: This line is used by the CC to 


configure the DAU to the IOCE attached to the 
A-interface. 


when the DAU is 


| NTE A | 


RKM 1 


| INTER | B 


| INTRA | A 


RKM 2 


| intr B | B 


\ 


ie aaa. 


Enable Interface B: This line is used by the CC to 
configure the DAU to the IOCE attached to the B-interface. 

Configuration Strobe: A pulse is transmitted to the DAU 
over this line when data is valid on the enable interface 
lines. 

Reset: This single line is used by the CC to reset the 
DAU. 

Configuration Accept: This line is used by the DAU to 
transmit a pulse to the CC, indicating that configuration 
data has been received and is valid. If the data is not valid, 
the signal is withheld to indicate the error to the CC. 

Interface A Enabled: This line is used by the DAU to 
indicate to the CC that the A-interface is enabled. 

Interface B Enabled: This line-is used by the DAU to 
indicate to the CC that the B-interface is enabled. 


DAU-RKM Interface 


The DAU-RKM interface is shown in Figure 3-17. Each 
DAU interfaces with up to five RKMs. Each RKM has two 
interfaces that permit it to be attached to two DAUs. (The 
configuration control of these interfaces is discussed under 
“‘Configuration Console Interfacing”.) The interface 


A dd hd 


PP] 


See Note 


Note: Each bus actually consists of 2 cables; one for 
RKM's 1 ~ 3 and one for RKM's 4 - 5. 


LEGEND: 


Simplex lines 


Mme = Multiple-driver simplex lines 
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Figure 3-17. DAU-RKM Interfacing 
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Distributed simplex lines 


between a DAU and an RKM consists of 3 simplex lines 
from the RKM to the DAU, 12 multiple-driver simplex lines 
from the RKM to the DAU, and 17 distributed simplex 
lines from the DAU to the RKM. These are listed in Figure 
3-18 for reference and are described in the following text. 


DAU TO RKM 


DISTRIBUTED SIMPLEX LINES AND BUSES: 


(Negative active level) 


Address Bus Out: 


01 2 3 


Data Bus Out: 


0 


Order Out 
Acknowledge Out 
Data Strobe Out 


Disconnect Out 


RKM TO DAU 
MULTIPLE DRIVER SIMPLEX LINES AND BUSES: 


(Negative active level) 


Data Bus In: 


0 


Response In 
Terminate In 
Error In 


SIMPLEX LINES: 
(Negative active level) 


Request In 
Interrupt In A 
Interrupt In 8 


Figure 3-18. DAU-RKM Interface Lines 


DAU-to-RKM Interface Lines | 


Address Bus Out: The ‘address bus out’ (ABO) consists of 


four lines. The address on the ABO is binary-encoded and is 
taken from the three least significant bits of the eight-bit 
address sent from the IOCE to the DAU. The high-order bit 
on the four-line bus is always a zero. The ABO is a 
distributed simplex bus. 

Data Bus Out: The ‘data bus out’ (DBO) is the data path 
from the DAU to the RKMs. It consists of eight data lines 
and one parity line. Odd parity is always maintained on the 
DBO, which is a distributed simplex bus. 

Order Out: This is a single distributed simplex line used 
by the DAU to signal the RKM that a command has been 
placed on the DBO. 

Acknowledge Out: This is a single distributed simplex 
line used by the DAU to reply to ‘request in’ from the 
RKM. 

Data Strobe Out: This signal is used only during a write 
operation to signal the RKM that data has been placed on 
the DBO and is stable. This is a single distributed simplex 
line. 

Disconnect Out: This is a single distributed simplex line 
used by the DAU to terminate a write operation. 


RKM-to-DAU Interface Lines 


Data Bus In: The ‘data bus in’ (DBI) is a multiple-driver 


simplex bus that consists of nine lines: eight data bits and 


one parity bit. The DAU checks the DBI for odd parity. 
Data is sampled when ‘response in’ is received from the 
RKM. 

Response In: This is a single multiple-driver simplex line 
used by the RKM to signal. the DAU that: it has sampled 
the data on the DBO during initial selection, it is ready to 
accept data during a write sequence, or that it has placed 
data on the DBI during a read sequence. 

Terminate In: This multiple-driver simplex line is used 
by the RKM during a read sequence to terminate data 
transfer. 

Error In: This multiple-driver simplex line is used by the 
RKM to signal the DAU that a parity error has been 
detected on the DBO. 

Request In: This is a single simplex line used by the 
RKM to signal the DAU to take a byte of data during a read 
operation and to signal the DAU to send a byte of data 
during a write operation. 

Interrupt A: This is a single simplex line which conveys a 
2.0-usec pulse from the RKM to the DAU as a result of a 
Read Display Constants command issued by the system. It 
signifies that the RKM has fetched the constants from the 
desired display and that they can be read at this time. The 
DAU will signal an ‘attention interrupt’ to the IOCE upon 
receipt of ‘interrupt A’. 
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Interrupt B: This is a single simplex line which conveys a 
2.0-usec pulse from the RKM to the DAU whenever the 
RKM has completed a pass of all 32 consoles attached to it 
and has placed data from one or more of these consoles in 
the queue. The DAU will signal an ‘attention interrupt’ to 
the IJOCE upon receipt of ‘interrupt B’. 


CONFIGURATION CONSOLE INTERFACING 


e Element status and alarm indication interfaces from: 


CEs TCUs 
IOCEs RCUs 
SEs DAUs 
DEs 


e CCE interfaces allow control of CEs from CC. 


e Configuration interfaces from CEs permit SCON of 
RCUs. 


e Data interfaces between IOCEs and: 
RCUs 
System Console Control Unit (SCCU) 


e Interface from SCCU to System Maintenance Monitor 
Console (SMMC). 


e Configuration interfacing via RCUs from IOCEs to: 


e Error reporting via RCUs to IOCEs from: 
DGs 
RKMs 


@ 1052’s cabled through CC but electrically separate. 


Figure 3-19 shows the overall interfacing of the configura- 
tion console (CC). The dashed vertical line through the 
middle of the figure indicates the division between the DCP 
System and the display equipment. Since all of the CC 
interfaces internal to the DCP System have been discussed 
previously in this chapter, this section deals in detail only 
with the configuration interfaces to the display equipment 
and the interface with the SMMC. However, before discuss- 
ing these interfaces in detail, a brief discussion of overall CC 
interfacing is presented, together with references to other 
locations in the chapter where more detailed information 
can be found. 

The CC interfaces with all major system elements to 
obtain status and alarm information for display at the CC 
panel. This interfacing has been discussed at the individual 
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element interfacing heading; it consists of logic check, 
power check, element state, and, sometimes, battery 
indications. 

Additional interface lines between the CE and the CC 
permit control and monitoring of the CE from the CC. A 
configuration interface enters each RCU from each CE, 


enabling either RCU to be configured to any IOCE. These ~ 


interface lines have been discussed under the heading 
“CEConfiguration Console Interfacing”’. 

The multiplexer channel is used for the IOCE-to-CC data 
interface. At the CC, the multiplexer channel connects to 
the RCUs and to the System Console Control Unit (SCCU). 
The SCCU, in turn, connects the channel to the 2821 
switch and to the console indicators and sense switches. All 
of this interfacing is discussed under the heading “IOCE- 
Configuration Console Interfacing”. The SCCU also inter- 
faces with the System Maintenance Monitor Console 
(SMMC) which is external to the DCP System. This 
interface is discussed later in this section. 

The 1052 printers are physically located in the CC and 
are cabled through a patch panel which is also located in 
the CC. No true interface exists here, however. The 1052’s 
are connected to and controlled by adapters located in the 
CEs. These adapters, in turn, are connected to the IOCEs 
via the multiplexer channels, as indicated in Figure 3-19. 
Additional information is found under the headings “IOCE- 
Channel Interfacing” and “1052 Adapter-1052 Interfac- 
ing’’. 

The various configuration interfaces that leave the CC 
remain to be discussed here. These are best understood in 
terms of the units which they control. Again referring to 
Figure 3-19, the upper shaded area represents, in simplified 
form, the data path between the IOCEs and the radar 
consoles. As there is more than one of each of the four 
types of units shown (IOCEs, DAUs, RKMs, and radar 
consoles), a particular configuration must be established 
before data can be passed between a particular IOCE and a 
particular keyboard or display at a radar console position. 
To accomplish this, the DAUs must be configured to the 
IOCEs, the RKMs must be configured to the DAUs, and the 
radar consoles must be configured to the RKMs. ‘The 
configuration data needed to accomplish this is provided by 
the IOCE, via the multiplexer channel, to one or the other 
of the RCUs (depending on the current configuration). It is 


the task of the configured RCU to directly configure DAUs 


to IOCEs via an interface to the DAUs and to configure 
RKMs to DAUs via an interface to the RKMs. In addition, 
the RCU provides configuration data to the RKM/R 
console so that it may perform the task of configuring radar 
consoles to RKMs. The RKMs also use their associated 
configuration interfaces to report internally detected errors 


to the IOCEs via the RCU. DAU errors are not reported 
over the DAU-RCU configuration interface. Thus, the 


complete configuration task for the upper data path shown 
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Figure 3-19. Configuration Console Interfacing, Overall View 


in Figure 3-19 involves three configuration interfaces from 
the RCUs. The first of these, RCU to DAU, has been 
discussed under the heading of “DAU Interfacing”. The 
two remaining interfaces are described later in this section. 

The shaded area at the bottom of Figure 3-19 shows the 
main data path from the CE to the Plan View Displays 
(PVDs). Most of the elements shown here must be 
configured also. The DEs are configured to DGs by the 
normal SCON instruction (see Chapter 4). A separate 
configuration interface is required, however, to configure 
the DGs to the CVGs. This interface is also used by the DGs 
to report errors, via an RCU, to the IOCEs. 

Four CC interfaces remain to be described: RCU-RKM, 
RCU-RKM/R, RCU-DG, and SCCU-SMMC. The first three 
of these are identical in nature and one description is given 
for all. 


DG and RKM Configuration Interface 


This type of interface is used for the transmission of 
configuration and status information between the RCU and 
DGs, RKMs, and RKM/R consoles. Each device has a 
separate interface, called a configuration interface (CI), and 
each interface is individually addressable as an I/O device 
by the 9020E system. The interface lines are shown in 
Figure 3-20 and are described below. 


Error Out 


Figure 3-20. DG and RKM Configuration Interface Lines 

Control Lines: Control lines 1, 2, 3, and 4 are used to 
transmit the following commands to the DG or RKM. 
Control line C4 is always transmitted as a logical zero. 


Display Subsystem 
Unit (DG or RKM) 


Configuration 
Console 


Command C1 C2 C3 c4 
Reset 0 0 0 ¢) 
Read Status 0 0 1 0 
Read Configuration © 8) 1 0 0 
Set Configuration 0 1 1 0 
Stop 1 O 0 0 
Resume 1 0 1 0 
Test 1 1 0 0 
Disable Interfaces 1 1 1 0 
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Each of these operations is described below. 

Reset: This code, in conjunction with a ‘single clock’ 
pulse on the ‘clock’ line, resets the selected unit to a 
null state in which it is prepared to receive commands 
and data via normal system paths. 

Read Status: This code and a series of ‘clock’ pulses on 
the ‘clock’ line cause the contents of the status register 
in the selected unit to be shifted serially by bit to the 
RCU on the ‘data out’ line. The most significant bit is 
transmitted first. Setting of the status register is 
inhibited when this code is recognized by the selected 
unit. For the DG, a series of 12 ‘clock’ pulses are 
issued. For the RKM and RKM/R Console, a series of 
32 ‘clock’ pulses are sent. 

Read Configuration: This code and a series of ‘clock’ 
pulses on the ‘clock’ line cause the DG or RKM to shift 
the contents of its configuration register to the RCU on 
the ‘data out’ line. The most significant bit is trans- 
mitted first. The number of bits for each unit is as 
follows: 


DG 12 bits 
RKM 14 bits 
RKM/R Console 32 bits 


Set Configuration: This code and a series of ‘clock’ 
pulses on the ‘clock’ line cause configuration data to be 
transmitted bit-serially to the DG or RKM from the 
RCU via the ‘configuration in’ line. The most signifi- 
cant bit is transmitted first. The number of bits for 
each unit is as follows: 


DG 12 bits 
RKM 14 bits 
RKM/R Console 32 bits 


Stop: This code, in conjunction with a single ‘clock’ 
pulse on the ‘clock’ line, causes the DG or RKM to stop. 
all normal operation at the end of the next internal 
clock cycle. 

Resume: This code, in conjunction with a single ‘clock’ 
pulse on the ‘clock’ line, causes the DG or RKM to 
continue operation from the point where it was 
stopped by a Stop command. 

Test: This code, in conjunction with a single ‘clock’ 
pulse on the ‘clock’ line, causes the DG or RKM to set 
the test bit in its status register. 

Disable Interfaces: This code, in conjunction with a 
single ‘clock’ pulse on the ‘clock’ line, causes the DG or 
RKM to disconnect all unit interfaces to other units 
except the configuration interface with the RCU. 


Clock Line: This line is used to transmit a 1.0-MHz clock 
pulse train starting 1.5 usec after the control line code is 
raised. The clock pulse train serves as a sync for data being 
transmitted over the ‘configuration in’ or ‘data out’ line and 


is variable in length, depending upon the number of bits 
being transmitted. 

Data Out: This line is used to transmit configuration 
data or status information from the DG or RKM to the 
RCU. 

Configuration In: This line is used to transmit configura- 
tion data from the RCU to the DG or RKM. 

Error Out: This line is raised by the DG or RKM 
whenever an error condition has been loaded into the status 
register. It remains up as long as the error condition remains 


in the unit. . 
Power On: A logical one on this line indicates to the 


RCU that all logic power supplies in the-DG or RKM are 
operating. The RCU assumes a power supply has failed in 
the unit if a logical zero is received on this line or zero 
differential voltage exists between the + signal and - signal 
lines. This line is not used for the RKM/R console 
interfaces. The RCU does not provide a power-off indica- 
tion to the 9020E system for the RKM/R console. 

Memory Enable (RKM Only): This line is not used by 
the 9020E system. The line is open-circuited at the CC. 


CC-SMMC Interface 


The SMMC interface provides a data path from the 9020E 
system to the System Maintenance Monitor Console for 
transmission of unit status information. Data is transmitted 
serially by bit over one data line. Two eight-bit bytes plus 
one parity bit make up a unit status message. Parity of the 
17 bits is odd. The interface lines are shown in Figure 3-21 
for reference and are described below. 


Data 


Power Monitor Over-ride 


Configuration SMMC 


Console 


Figure 3-21. CC-SMMC Interface Lines 


Data: This line is used to transmit data, serially by bit, 
from the CC to the SMMC. 

Clock: This line is used to transmit 17 clock pulses at a 
10-kHz rate for each unit message. 

Transfer: This signal is raised when the CC has a message 


_to transmit to the SMMC and is dropped at the end of each 
' message. 


Disabled: This signal is a level that is activated when the 
SCCU is in Maintenance mode. 

Fault: This line conveys a raised level when an SMMC 
Data Check is detected within the CC. It can also be 
activated by a Control Immediate command from the 
IOCE. 

Help: This line is used to transmit a 1-usec pulse to the 
SMMC when a Control Immediate (Help) command is 
decoded by the SCCU. 

Request: This signal, originating from the SMMC, is a 
2-ms pulse. Upon réceipt of this signal, the SCCU generates 
‘attention status’ to the selected IOCE (if the enable 
request mask bit for that IOCE is set). . 

Interlock: This line informs the SMMC that the CC is 
attached. The CC provides a jumper wire between the + 
signal and the - signal lines. 

Power Monitor Tripped: This line is not used by the 
9020E system. It is open-circuited at the CC. 

Power Monitor Override: This line is not used by the 
9020E system. It is open-circuited at the CC. 


1052 ADAPTER-1052 INTERFACE 
e Adapters housed in CEs. 
e Standard I/O interface with IOCEs. 


e 1052s cabled through patchboard in CC. 


The 1052 adapters are physically located in the CEs but are: 
not logically associated with them. The adapters are 
connected to the multiplexer channels in the IOCEs via the 
standard I/O interface. - 

The 1052 adapters interface with the 1052’s via cables 
from the CEs to the patchboard in the configuration 
console and the cables from the patchboard to the 1052’s. 


Note: When working with these cables, keep in mind that 
they have the same type of connectors on each end (type 
A) and that the lines within the cables do not correspond, 
pin for pin, at the two ends. The connector block nearest 
the adapter has a full complement of pins; the other 
connector block does not. 
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_ Figure 3-22 shows the interface lines between the 1052 
adapter and the 1052’s. \ 


STANDARD I/O INTERFACE SUMMARY 


The I/O interface connects a channel with control units. 
External cables physically connect all control units in a 
chain, with the first control unit being connected to the 
channel. The signal lines of the I/O interface consist of an 
output and an input bus for passing information between 
the channel and control units, tag lines for interlocking and 
for controlling the information on the buses, and selection 
control lines for scanning or selecting the I/O device. 

The signal lines are tabulated below under I/O Interface 
Lines. Note that the names of the lines include the words 
“Out” or “In’’. In every case, “Out” describes a line which 
transmits signals to the control units; ‘‘In” describes a line 
which transmits signals to the channel. 


1/O Interface Lines 


Name of Line Abbreviations 


Bus Out Position P Bus Out P 
Bus Out Position 0 Bus Out 0 
Bus Out Position 1 Bus Out 1 
Bus Out Position 2 Bus Out 2 
Bus Out Position 3 Bus Out 3 
Bus Out Position 4 Bus Out 4 
Bus Out Position 5 Bus Out 5 
Bus Out Position 6 Bus Out 6 
Bus Out Position 7 Bus Out 7 
Bus In Position P Bus InP 
Bus In Position 0 Bus In0O 
Bus !n Position 1 Bus In 1 
Bus tn Position 2 BusIn 2 
Bus In Position 3 Bus In 3 
Bus In Position 4 Bus In 4 
Bus In Position 5 Bus In 5 
Bus In Position 6 Bus In6 
Bus In Position 7 Bus In 7 
Address Out Adr-Out 
Address In Adr-In 
Command Out Cmd-Out 
Status In Sta-In 
Service Out Srv-Out 
Service In Srv-in 
Operational Out Op!-Out 
Operational In Opl-In 
Hold Out Hid-Out 
Select Out Sel-Out 
Select tn Sel-In 
Suppress Out Sup-Out 
Request In Req-In 
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Buses 


Each bus is a set of nine lines consisting of eight 
information lines and one parity line. Unused lines must. 
present logical zeros to the receiving end. The byte must 
always have odd parity. 


Bus Out 


Bus out is used to transmit addresses, commands, control 

orders, and data to the control units. The type of 

information transmitted is indicated by the outbound tag 
lines. 

1. When ‘address out’ is up during the channel-initiated 
~ selection sequence, Bus Out specifies the address of the 
device with which the channel wants to communicate. 

2. When ‘command out’ is up during the channel-initiated 
selection sequence, Bus Out specifies a command. 

3. When ‘service out’ is up in response to ‘service in’ during 
execution of a write or control operation, the nature of 
the information on Bus Out is dependent upon the type 
of operation. For example, during a write operation it 
will contain data to be recorded by the device. During a 
control operation, it can specify an order code or a 
second-level address within the control unit or device. 


The period during which information on Bus Out is valid 
is controlled by the tag lines. During transmission of the 
device address, information on the bus need be valid from 
the rise of ‘address out’ until the rise of ‘operational in’, 
‘select in’, or, in the case of the control-unit-busy selection 
sequence, until ‘status in’ drops. When the channel is 
transmitting any other type of information, the informa- 
tion on Bus Out is valid from the rise of the signal on the 
associated outbound tag line until the fall of the signal on 
the corresponding inbound tag line. 


Bus In 


Bus In is used to transmit addresses, status, sense informa- 

tion, and data to the channel. A control unit can place and 

maintain information on Bus In only when its operational- 

in line is up, except in the case of the control-unit-busy 

sequence. The type of information transmitted over Bus In 

is indicated by the inbound tag lines. 

1. When ‘address in’ is up, Bus In specifies the address of 
the currently selected device. 

2. When ‘status in’ is up, Bus In contains a byte of 
information that describes the status of the device or 
control unit. 


1052 Adapter 1052 


Proceed 
Ind Attention 
Ind Bus Out Check 
Ind Command Reject 
Ind Intervention Required 
Ind Equipment Check 
Ind Inhibit Carrier Return 
Lamp Read 


Lamp Write 


- Upper Case Lamp 


- Printer Busy Lamp CE Panel 
ane 


- Printer Cycle Lamp 
DR (0-7) 
~ CE Mode 
+ Ready PB 
+ Not Ready PB 
CE Continuous Write 
- CE Reaa 


+ CE Reset 


~ Request PB N/O 


- Request PB N/C 


Figure 3-22. 1052 Adapter - 1052 Interface 


3. When ‘service in’ is up during execution of a read or 
sense operation, the nature of the information contained 
on Bus In is dependent upon the type of operation. 
During a read operation, it may contain a byte of data 
from the record medium. During a sense operation, the 
bus contains a set of bits that describe the detailed status 
of the device and the conditions under which the last 
operation was terminated. 


Tag Lines 


_ The period during which information on the buses is valid is 
controlled by the tag lines. These are listed below, together 
with a brief description of each. 

Operational Out: This line, which runs from the channel 
to all attached control units, is used for interlocking 
purposes. Except for the ‘suppress out’ line, all lines from 
the channel are significant only when ‘operational out’ is 


1052 Adapter 1052 


Aux, T1, 72,-Ri, R2, R2A, R5 


Se 
a 
Ready 


Printer 


Keyboard 


up. Whenever it is down, all inbound lines from the control 
unit drop, and any operation currently working over the 
interface is reset. 

Request In: This line, which runs from all attached I/O 
control units to the channel, is used to signal the channel 
when a contro] unit has data or status to be serviced. 
“Request in’ can be signaled by more than one control unit 
at a time. 

Address Out: This line, which runs from the channel to 
all attached control units, provides two functions: 

1. Device selection—the ‘address out’ line signals the 
control unit to decode the address on Bus Out. | 

2. Disconnect operations—if either ‘select out’ or ‘hold out’ 
is down and ‘address out’ is up, the presently connected 
control unit drops its ‘operational in’ line, thus discon- 

necting from the interface. . 

Select Out: This is a line from the channel to the control 
unit having higher priority and from any control unit to the 
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control unit next lower in priority. This line, together with 
the ‘select in’ line, provides a loop for scanning the attached 
control units. 

Hold Out: This line, which runs from the channel to all 
attached I/O control units, is used to enable the ‘select out’ 
signal. Only when ‘hold out’ is up can ‘select out’ be 
considered active. ‘Hold out’ gates the ‘select out’ signal in 
the control units. ‘Hold out’ can be up only if ‘operational 
out’ is up. When used, ‘hold out’ minimizes propagation of 
the fall of ‘select out’, 

Select In: This line extends the ‘select out’ signal from 
the cable terminator block to the channel. It provides a 
return path (to the channel) for the ‘select out’ signal. The 
definition of the ‘select in’ line is the same as that for a 
‘select out’ line emanating from any control unit. 

Operational In: This line, which runs from all attached 
control units to the channel, is used to signal the channel 
that a device has been selected (except for the control-unit- 
busy sequence). The selected device is identified by the 
address byte transmitted over Bus In. 

Address In: This line, which runs from all attached 
control units to the channel, is used to signal the channel 
when the address of the currently selected device has been 
placed on Bus In. The channel responds to ‘address in’ by 
means of ‘command out’. The rise of ‘address in’ indicates 
that the address of the currently selected device is available 
on Bus In. 

Command Out: This line, which runs from the channel 
to all attached control units, is used to signal the selected 
device in response to a signal on the ‘address in’, ‘status in’, 
or ‘service in’ line. A signal on the ‘command out’ line asa 
response to the ‘address in’ signal during the initial-selection 
sequence indicates to the selected device that the channel 
has placed a command byte on Bus Out. 

A ‘command out’ response to ‘address in’ means 
proceed, except during a channel-initiated selection se- 
quence. In the case of the latter, ‘command out’ indicates 
that Bus Out defines the operational command to be 
performed. A ‘command out’ response to ‘service in’ always 
means stop; a ‘command out’ response to ‘status in’ means 
stack. 
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When ‘command out’ is raised to indicate proceed, stack, 
or stop, Bus Out must have a command byte of zero, but it 
need not necessarily have correct parity. 

Status In: This line, which runs from all attached control 
units to the channel, is used to signal the channel when the 
selected device has placed status information on Bus In. 
The channel responds with either ‘service out’ or ‘command 
out’, depending upon whether it accepted the status. 

Service Out: This line, which runs from the channel to 
all attached control units, is used to signal the selected 
device in recognition of a signal on the ‘service in’ or ‘status 
in’ line. A signal on the ‘service out’ line indicates to the 
selected device that the channel has accepted the informa- 
tion on Bus In or has provided on Bus Out the data 
requested by ‘service in’. 

Service In: This line, which runs from all attached 
control units to the channel, is used to signal the channel 
when the selected device wants to transmit or receive a byte 
of information. The nature of the information associated 
with ‘service in’ depends upon the operation and the device. 
The channel must respond to ‘service in’ by ‘service out’, 
‘command out’, or, during an interface disconnect, by 
‘address out’. 

During read, read backward, and sense operations, 
‘service in’ rises when information is available on Bus In. 
During write and control operations, ‘service in’ rises when 
information is required on Bus Out. 

Suppress Out: This line, which runs from the channel to 
all attached control units, is used both alone and in 
conjunction with the out-tag lines to provide the following 
special functions: Suppress Data, Suppress Status, Com- 
mand Chaining, and Selective Reset. 


OVERALL INTERFACING 


Figure 3-23 provides an overall view of the interfacing in 
the 9020E system. It has been placed at the end of the 
chapter and provided with a blank apron so it can be folded 
out for reference as the chapter is read. 
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e Reconfiguration under EXC program control. 


e 9020E may have two or more independent configura- 
tions. 


e SCON instruction used to configure major elements. 


e DAUs and display equipment contigured via configura- 
tion console. 


The 9020 systems are unique in their ability to be 

reconfigured dynamically under program control. This 

capability enables the executive control (EXC) program to 
respond to a change in tasks or workload by restructuring 
the system into a more appropriate configuration. Further, 

a malfunctioning element may be automatically replaced 

with a redundant element while the ATC task continues. 

The 9020E system can alter the configuration of certain 

associated display equipment under program control as 

well. 

Certain requirements imposed on the system when 
forming subsystem configurations are summarized as fol- 
lows: 

1. When units of the 9020E system are actively engaged in 
performing the ATC operational task, other units not so 
engaged, or malfunctioning units, must not be permitted 
to interfere destructively. 

2. If units of the 9020E system are not required for the 
operational task, they should be available for auxiliary 
tasks or maintenance. 

3. Those units of the 9020E system which are not actually 
malfunctioning or undergoing maintenance should be 
immediately available to the EXC program to perform 
the operational task, regardless of their current auxiliary 
tasks. 

4. Units that require maintenance must be provided with 
adequate maintenance facilities and effective isolation 
from the remainder of the operational system. 


In the 9020E system, there is no inherent master/slave 
relationship which requires that a specific computing 
element have primary control. Any one of the available CEs 
may be assigned a particular task. Nothing logically 
distinguishes one CE from another except the Load 
Identity (LDI) instruction. 

The overall system, with its various system elements, 
may be configured into two or more different and 
independent subsystems to perform necessary tasks. This 
function of system configuration is under control of the 
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EXC program. Therefore, it is the responsibility of the EXC 
program to specify the permissible communication paths 
between major elements for any given configuration. That 
is, the EXC program must specify to each major element 
those other elements to which it can transfer data and from 
which it can receive data. In addition to specifying data 
paths, the EXC program must specify to each major 
element the CE, or CEs, from which it may accept 
configuration control. Two separate controllable paths are 
provided for data and configuration information flow 
between elements. 

The ability of the 9020E system to function as two or 
more subsystems under control of the EXC program is 
further facilitated by the existence of four operational 
states in each element. Each major element can assume one 
of the four possible element states at any given time. The 
state establishes the degree of availability of the element to 
the EXC program and the extent of the manual control 
which operating and maintenance personnel are permitted 
over the element. Here again, the responsibility for assign- 
ing the state of each element rests with the EXC program 
and is part of the configuration control structure of the 
system. 

The primary means of configuration control is via the 
Set Configuration (SCON) instruction. This instruction and 
the associated hardware enable a CE to establish the 
configuration of all the major elements in the system. The 
elements which are included in the primary configuration 
control structure of the 9020E system are: 

1. Computing Elements (CEs) 

2. I/O Control Elements (IOCEs) 
3. Storage Elements (SEs) 

4. Display Elements (DEs) 

5. Tape Control Units (TCUs) 

6. Configuration Console (CC) 


These six element types are considered major elements 
of the 9020E system. Note that with reference to the CC 
configuration control actually refers to the Reconfiguration 
Control Units (RCUs) contained within the CC. The CC 
itself is not configurable. 

In addition to this primary soanandion control, the 
RCUs provide the EXC program with the facility to control 
the configuration of the Data Adapter Units (DAUs) and 
certain pieces of display equipment. Thus, the control 
which the EXC program has over system configuration is 
extended by the RCUs to include additional elements 
which, except for the DAUs, are external to the 9020E 
system itself. 
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This secondary means of configuration control does not 
utilize the SCON instruction. Instead, a Write Configuration 
command is issued to an RCU via the multiplexer channel 
which handles it according to standard I/O interface 
operation. Configuration interfaces between the RCUs and 
the DAUs, RKMs, RKM/R consoles, and DGs provide for 
configuration control over devices on the following inter- 
faces: 

1. DE-DG 

2. DAU-IOCE 

3. RKM-DAU 

4. Radar Console - RKM 


Note that the DE-DG configuration is accomplished by 
the combination of a SCON instruction executed by a CE 
and a Write Configuration command executed by an RCU. 
The SCON instruction configures the DE to the DGs; the 
Write Configuration command configures the DGs to the 
DE. Note also that radar consoles and RKMs are actually 
configured to each other by an RKM/R console according 
to data received from the EXC program via an RCU. 

The four interfaces mentioned here are discussed in 
Chapter 3 and are shown in Figure 3-19. 


SET CONFIGURATION INSTRUCTION (SCON) 
e RR format. 
e Establishes system configuration. 


The SCON instruction is the programming means by which 

the 9020 may be configured into the desired system 

configurations. This instruction, by means of a configura- 

tion mask and selection mask, located in general-purpose 

registers, established the system configuration by specifying 

to the system elements: 

1. The state they are to assume. 

2. The CEs from which they can accept future reconfigura- 
tions. 

3. The system elements from which they are to receive data 
and control information. 


Because the SCON instruction is a vital part of configur- 
-ation control, many tests (both hardware and program) are 
made to ascertain that it can be legally issued by a given CE 
and accepted by other system elements. Three of the 
conditions imposed on the SCON instruction are: 

1. It can be issued by a CE only when it is in supervisory 
state. If SCON is attempted in the problem state, a 
“privileged” interruption results. 

2. It can be issued by a CE only when it is in element state 
three or zero. If SCON is attempted in states two or one, 
a “specification” interruption results. 
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3. It must configure a system element so that element will 
accept a SCON instruction from at least one CE. An 
automatic check is made to ensure this condition, and, if 
it is not met, a “specification” interruption occurs. 


Configuration Mask 
e Specified by R1 of SCON instruction. 
e Contains configuration data for selected elements. 


The configuration mask [Figure 4-1(a)] is made available to 
the SCON instruction from the general-purpose register 
specified by Rl. The mask is loaded by the SCON 
instruction into the configuration control register (CCR) of 
the selected major elements (elements specified in the 
selection mask). The configuration mask can contain 
sufficient configuration data for any type of element; 
however, in most cases, only the necessary portions of the 
mask are sent to the receiving element. The SEs and DEs 
are the exceptions; the complete mask is transmitted to 
them via the storage data bus in (SDBI). SEs and DEs gate 
in only the required fields. Configuration data sent over the 
SDBI is in a different format from that of the configuration 
mask. This is shown in Figure 4-2. Figure 4-3 shows the 
CCR formats for the major system elements. 

Each element selected to receive the SCON checks the 
data for correct parity and for any other conditions which 
may make the data invalid for that element. If the 
configuration data is accepted by the element, it responds 
to the issuing CE. The response resets the element’s bit in 
the select mask, indicating to the issuing CE that SCON was 
accepted. At the completion of the execution of the SCON 
instruction, the condition code is set to O if all elements 
respond and to 2 if one or more do not respond. 


Selection Mask 
e Specified by R2 of the SCON instruction. 
e Designates elements to receive configuration mask. 


The selection mask [Figure 4-1(b)] is made available to the 
SCON instruction from the general-purpose register speci- 
fied by R2. This mask designates the elements to receive 
the configuration bits contained in the configuration mask 
issued by the SCON instruction. Multiple CCRs may be set 
with one SCON instruction when identical masks are to be 
used in each receiving element. 
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(a) Configuration Mask: 


a 
2 


0 
(b) Selection Mask: 


Notes: 
1. * Denotes unused bits which may be zero or one. 


2. Maximum configuration is assumed. For lesser systems, those bits not required 
become spare. 


Figure 4-1. 9020E Configuration Mask and Selection Mask Formats 
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Legend: 


* Denotes unused bits which may be zero or one. 


Figure 4-2. SDBI Configuration Data Format 
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Note: The maximum configuration is assumed. For lesser systems, those bits 
riot required become spares. 


Legend: 


* Unused bits (may be one or zero). 


Figure 4-3. 9020E Configuration Control Register Formats 
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CONFIGURATION CONTROL REGISTER (CCR) 


e Physical register in each major element. 


e Set by SCON instruction. 


The configuration control register is a physical register in 
each of the major system elements. It is set by a SCON 
instruction executed by a computing element. The CCR in 
each major system element consists of a state field, a SCON 
field, and a communications field. These fields contain 
information necessary to establish the state of the element, 
the CEs from which it will accept future SCONs, and the 
other system elements from which it may receive data. 
Additionally, an inhibit logout-stop (ILOS) bit is contained 
in each CE and IOCE, and an inhibit display element stop 
(IDES) bit is contained in each DE. Because of the various 
functions of the system elements, there are differences in 
the formats of their respective CCRs. The CCR format for 
each of the system elements is shown in Figure 4-3, and 
each field is described below. 


System Element States 


e Four possible states. 


State Bits 


CE ELC 
Maskable , 


Zero 
TEST Switch 
Off 


Zero 
TEST Switch 
ON 


Notes: 


e Specified by CCR (0, 1). 


Each major system element of the 9020 can be in one of 
four states. The executive control (EXC) program estab- 
lishes these states by setting the state field via a SCON 
instruction. The state of an element determines the degree 
of manual control which maintenance and operating per- 
sonnel may exercise over it. For example, in state zero (the 
lowest operational state), virtually all element controls are 
operational so that maintenance may be performed on the 
element. Further, by placing the element in Test mode, the 
ATC system will be denied use of the element completely. 
In state three (the highest operational state), virtually all 
manual controls are disabled so that the element can 
operate in the ATC system without interference. From the 
larger point of view, element state may be looked upon as 
the element’s degree of availability to the ATC task and is, 
therefore, closely related to the element’s immediate role in 
the system. Figure 4-4 contains an analysis of the effect on - 
element operation for each of the four computing element 
states. Details for each of the other elements are contained 
in their respective theory manuals. 


Power and 


Element Maintenance Configuration CCR 
Controls 7 Controls 


Console Controls Controls 


1. Where Yes is entered, it implies a legal or permissive ability to issue SCON. The issuing CE must have its own SCON bit set and meet all 


other SCON restrictions. 


2. If a CE attempts SCON, a specification check interruption will result. No signals will issue to other elements. 


3. Receiving element must have proper SCON bit set. 


4. When switch is ON, SCON will not affect any external element. The issuing CE may accept SCON from itself. When TEST switch is ON, 
it will be-possible for a CE to have its state bits changed manually. If the state bits are changed from 00 to 11, SCON may be exercised by 
the CE, but no element except the issuing CE will respond. If the state bits are changed to 10 or 01, Note 2 opplies. 
5. SCONSs will be rejected regardless of CCR, except that a CE may accept SCON from itself if it has its own SCON bit set. 
6. This column applies to receiving CEs. Incoming CE ELCs are masked by SCON bits in receiving CEs. Where Yes is entered, the ELC may 
also be masked by normal interruption mask controls. Where No is entered, no further masking is possible. 
7. These include:LOAD (IPL), INTERRUPT, STORE, DISPLAY, RATE switch, ADDRESS COMPARE, PSW RESTART, SET IC, START, STOP, 360 MODE 


switch, 


8. Maintenance controls are generally disabled except where other truth tables indicate exceptions. 


9. Configuration Console SYSTEM INTERLOCK switch ON, 


Figure 4-4. Summary of State Definitions 
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State Three 
e Highest operational state. 
e CCR (0, 1)=1, 1. 


If a major system element is designated as being in state 
three by the EXC program, the element is presumed to be 
at the highest operational capability level. Normally, the 
ATC operational task would be run in this state. A CE in 
state three has the ability to initiate reconfiguration of the 
existing system structure, subject to the information and 
control paths established by the EXC program. 


State Two 
e Capable of being recalled to state three. 
e CCR (0, 1)=1,0. 


A major system element designated by the EXC program as 
being in state two is considered free of malfunctions and 
completely capable of performing the ATC operational 
task, except that a CE in this state cannot initiate a system 
reconfiguration. 

While in state two, a major system element might be 
employed in performing subsidiary tasks, but it is capable 
of being immediately recalled by the EXC program to assist 
other units in an operational task or to replace a malfunc- 
tioning unit. It is assumed that any subsidiary programs 
that are run while in state two will be debugged and under 
tight monitor control. 

The EXC program may designate a computing element 
as recallable by properly setting the SCON field of that 
elements CCR. (See CCR SCON Field). If a computing 
element has been designated by the EXC program to be 
recallable, it will automatically interrupt its current tasks 
and go to state three when certain check signals are received 
from other computing elements. 


State One 

e Capable of being recalled to state three. 
e Certain manual controls enabled. 

e CCR (0, 1)=0, 1. 


State one may be considered a “quasi-redundant”’ state. 
When in state one, an element may be designated as 
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recallable by the EXC program. However, certain operator 
manual controls are enabled to provide the necessary 
manual intervention to debug programs and run diagnostic 
programs. Thus, this state permits the running of programs 
that are not sufficiently predictable to be run in state two 
which requires tight monitor control. Further, such pro- 
grams may be run while the subsystem remains available to 
the EXC program for operational use. 

As in state two, a CE in state one, when designated as 
recallable, will automatically terminate its current task and 
go to state three upon receipt of certain check signals from 
other CEs. 


State Zero 


Two substates. 


e Useful for subsystem testing. 
e@ Manual controls active. 


e Capable of being recalled to state three if test switch is 
off. 


e CCR (0, 1)=0,0. 


The zero state has been provided to accommodate the 
maintenance needs of the 9020 system. This state actually 
comprises two substates which are selected by a test switch. 

With the test switch off, the zero state is considered 
primarily useful for subsystem testing. All manual controls, 
except those governing the manual setting of CCRs and 
those which turn off element power, are enabled. However, 
an element may be recalled by the EXC program if it has 
been designated as recallable; if it is so designated, a CE will 
go to state three upon receipt of certain check signals from 
other computing elements. Effective subsystem isolation 
can be retained in this mode if desired. Care must be 
exercised when the element is in state zero with the test 
switch off, due to the availability of all manual-intervention 
capabilities of the system. It is assumed that a system 
performing the ATC task will protect itself, via configura- 
tion control, from spurious signals generated by a subsys- 
tem under test. 

When in state zero with the test switch on, the element 
is isolated from the remainder of the system to the extent 
required for its standalone or unit-test operations to be 
used. In the case of the RCU, TCU, DE, and SE, this is a 
blanket isolation; i.e., all system interfaces are closed. For 
the CE and IOCE, this isolation 1s primarily achieved by 
refusing to accept the SCON instruction. Complete isola- 
tion is not desirable for these two elements. In this 


substate, all manual controls, including power and manual 
CCR controls, are active. To preclude loss of switch 
control, the state bits of each element will be reset to 00 
whenever the test switch is turned off after having been in 
the on position. 


CCR SCON Field 
e Allows reconfiguration from system CEs. 


The SCON field, CCR (2-5), in the various system 
elements is primarily associated with the execution and 
acceptance of SCON instructions. These positions establish 
the ability of the element to respond to a reconfiguration 
from one or more specified CEs. 

The EXC program has the responsibility of keeping track 
of the.CEs which have the authority to reconfigure the 
system. This authority is indicated in each element’s CCR, 
and only CEs with the authority are allowed to alter the 
receiving element’s CCR. 


No. | 
Storage Element 


No. 1 
Computing Element 


SE 


No. 2 
Storage Element 


Figure 4-5 shows a SCON example where CE 1, IOCE 1, 
and SEs 1 and 2 can each be reconfigured only be CE 1. No 
other CEs within the system can reconfigure these ele- 
ments. 

If the SCON field is void of all bits, that particular 
element is unavailable to the system; i.e., cannot be 
reconfigured. Therefore, as a programming precaution, each 
execution of a SCON instruction is checked to determine 
that at least one bit is on in the SCON field of the 
configuration mask [Figure 4-1(a)]. If the field is all 0’s, 
the instruction is not completed and a ‘specification 
interrupt’ occurs. 

One other precaution is taken with the SCON field to 
prevent an element from being made unavailable to the 
system. If the SCON field is set to all O’s due to 
maintenance operations in state zero or to circuit failures, a 
special circuit bypasses normal SCON decoding and causes 
the field to appear set with all 1’s. 

As mentioned earlier, the EXC program can use the 
SCON field of a CE to make that CE automatically 
recallable. For example, assume a CE in state one has in its 


PtP fefotf fefofo fo fo, 


*Not used 


Figure 4-5. CCR Field Examples 
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CCR SCON field the SCON bit of a CE in the ATC system. 
Then, should the CE in the ATC system malfunction, the 
state one CE would be hardware-forced to state three and 
would take an external interruption preparatory to taking 
over execution of the EXC program. This action is further 
explained in Chapter 7. 


CCR ILOS Field in CE and IOCE 
e Inhibit logout stop. 

e CCR position 6. 

e Applicable to CEs and IOCEs. 


The inhibit logout stop (ILOS) bit, CCR(6), is applicable 
only to CE/IOCE operations and controls the issuance of a 
logout stop signal by either CEs or IOCEs to SEs. This bit is 
set and reset according to the configuration mask and 
selection mask used with the particular SCON instruction. 

If CCR(6) = 1, the CE/JOCE will not issue a logout stop 
signal to an SE. If CCR(6) = 0, a logout stop signal is 
automatically issued to an SE when the SE has signaled 
storage checks. 

The ILOS bit is intended primarily for malfunction 
recovery in systems or subsystems that contain only one 
SE. This bit is also set into CCR(6) of all CEs/IOCEs during 
a system initial program load operation. 


CCR IDES Field in DE 

e Inhibit display element stop bit. 

e CCR position 22 in DE. 

e Applicable only in DEs. 

The inhibit display element stop (IDES) bit, set on in the 
CCR of a DE, prevents that element from entering a logout 
stop state upon detection of a DE malfunction encountered 
during a DG storage access. If this bit is set off, the DE 


automatically enters a logout stop state upon detecting this 
type of check condition. 


CCR Communication Fields 
e Establish interelement communication. 


e Provide isolation from elements not in same subsystem. 
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CCR fields in each major element indicate the other major 
elements from which this element can receive data. In this 
manner, elements can be completely isolated into indepen- 
dent subsystems. 

A communication bit, when set, enables the interface 
from the associated unit. In some cases, this may involve 
only the control lines; in other cases, it may also involve 
data lines. In the use of all interfaces, some control action is 
required before any data bus is examined; if this action is 


inhibited, it is unnecessary to further degate the data bus. 


since it will not be examined. Signals to the DAR, which 
enable CEs to monitor abnormal conditions in the various 
elements, are not gated by the CCR communication bits 
because it may be desirable to reconfigure elements without 
being required to accept other communications from them. 

Figure 4-5 shows the use of the communication fields in 
establishing interelement communications. In order for CE 
1 to receive data from SE 2, CE 1 must have the 
corresponding SE 2 bit on in its CCR. The same SE 2 bit 
must also be on to allow CE | to initiate a storage request 
or data transmission to SE 2. 

On the other end of the interface, SE 2 must have the 
corresponding CE 1 bit on in its CCR either to receive or 
send information from/to CE 1. From this example, it is 
apparent that in order to establish complete communica- 
tion between two elements corresponding bits must be on 
in each of these elements. 

In the same example, IOCE 1 can successfully communi- 
cate with SE 2. IOCE 1 may also initiate communication 
with SE 1, but SE 1 will not reply because there is no 
corresponding IOCE 1 bit to complete the interface 
connection. Being able to break the interface at both ends 
provides maximum isolation and minimum chance of 
unwanted interference from elements outside the active 
ATC system. 


DG Communication Field in DE 


This field occupies the first 16 position of the DE’s CCR 
and controls the connection of the eight DG interfaces to 
the four quadword registers within the DE. Referring to the 
DE CCR format in Figure 4-3, the numbers in the DG 
communication field represent the eight DG interfaces and 
the letters represent the four quadword buffer registers. For 
example, if bit 15 were set to 1, interface 8 would be 
connected to buffer register A. Refer to the DE theory 
manual for further details. 


Communication Bit Restrictions 


Certain hardware and programming restrictions exist on the 
setting of bits in the communication fields of the CCRs of 


various elements. For example, it is not feasible to have 
more than one CE bit set in the CCR of an IOCE since the 
IOCE would then be unable to return interrupts to the 
correct CE. 

In the RCU, hardware does not allow a SCON to be 
accepted if more than one bit is set in the IOCE field. 

DEs have three hardware restrictions upon the setting of 
the DG field. The DEs will not accept the configuration 
mask if: 

1. More than four DG’s communication bits are set. 

2. Any DG has more than one bit set. 

3. More than one DG is configured to any one buffer 
register. 


ISOLATION OF MALFUNCTIONING ELEMENTS 


The error-detection circuitry of the system provides protec- 
tion from propagation of logic errors. The program may 
then use configuration control to isolate the malfunctioning 
unit for maintenance purposes. 

Each power supply contains an overvoltage/overcurrent 
sensor which, when activated, turns the power off in that 
unit before damage occurs. Configuration control provides 
degating from other units with normal power status. 

The circuitry which directly connects to a distributed 
simplex interface is designed so that the interface will not 
be disabled by commonly encountered component failures, 
unless, of course, the failure occurs in the primary element. 
The latter case is exemplified by a component failure in the 
drivers on the CE to 10 SE/DE interfaces; the former is 
exemplified by a component failure in an SE or DE receiver 
in the same interface. 

The circuitry which is directly connected to the I/O 
interface in the TCU, DAU, and CC is designed so that 
power may be turned on and off in each of these units 
without disrupting any activity in the interface that does 
not concern that unit. Also, in the interfaces in the 9020E 
system of the type exemplified by that from a CE to 10 
SE/DEs, turning power on and off in an SE or a DE 
connected to that interface will not disrupt interface 
operation. However, to prevent disrupting the activities of 
the SEs and DEs connected to that interface, as a result of 
power being turned on and off in the CE, the SEs and DEs 
must be configured not to accept communications from 
that CE. 


CONFIGURATION EXAMPLES 


Two examples of system configuration, presented as fol- 
lows, illustrate the use of the SCON instruction and show 
the resulting contents of the CCRs of the various system 
elements. 


Recall that the DAUs are not configured by the SCON 
instruction but, rather, via Write Configuration commands 
executed by the RCUs. The Write Configuration command 
is also used to configure DGs, RKMs, and RKM/R consoles. 
Refer to the Configuration Console theory manual for 
detailed information. 


Configuration Example 1 


Figure 4-6 is an example of an ATC configuration. The 
figure shows simplified representations of the CCRs in the 
major elements of a typical system. In this example, one 

CE, one IOCE, three SEs, two DEs, two TCUs, and one 

RCU are configured into the active system. The various 

conditions are as follows: 

1. The state bits of each element in the ATC subsystem are 
set to state three (11). This is the highest state and the 
one in which the ATC functions are assumed to be 
performed. 

2. The SCON bit in each element CCR is set to CE 1 so 
that future reconfigurations can be accomplished by CE 
1. 

3. In CE 1, the SE field of the CCR is set to allow CE 1 to 
listen to SEs 1, 2, and 3. The DE field is set to listen to 
DEs 1 and 2. The IOCE field is set to listen to IOCE 1. 

4. In IOCE 1, the SE field is set to allow IOCE 1 to listen 
to SEs 2 and 3, and the CE field is set to listen to CE 1. 

5. Each of the configured SEs has its CE bits set to listen to 
CE 1; SEs 2 and 3 are also set to listen to IOCE 1. 

6. Each of the configured DEs is set to listen to.CE 1. The 
DG field in DE 1 is set to connect the DGs on interfaces 
1, 2, 3, and 4 to buffer registers A, B, C, and D, 
respectively. In DE 2, the DG field is set to connect the 
DGs on interfaces 5, 6, 7, and 8 to buffer registers A, B, 
C, and D, respectively. 

7. Each of the configured TCUs and the one configured 
RCU are set to listen to IOCE 1. In this example, CE 1 
may communicate with IOCE 1; SEs 1, 2, and 3; and 
DEs 1 and 2. With its.own SCON bit on, and being in 
state three, CE 1 may execute the SCON instruction and 
reconfigure the system when necessary. 


The storage elements are set up so that CE 1 has access 
to all three SEs, whereas the IOCE is restricted to SEs 2 and 
3. This provides the CE with an area of storage free from 
interference by the IOCE. 

The DEs are set up for communication with CE 1 and 
with the DGs specified in the DG field. However, before 
communication between DEs and DGs can occur, subse- 
quent programming is required to set the configuration of _ 
the DGs via RCU 1. RCU 1, itself, is properly configured 
and can execute the necessary Write Configuration com- 
mands to accomplish this. 
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Figure 4-7 shows how the configuration in this example 
could be established by three SCON instructions. Figure 
4-7(a) shows the configuration mask and selection mask 
required for the first SCON instruction. With this SCON 
instruction, CE 1 configures itself into state three with the 
ability to communicate with IOCE 1, SEs 2 and 3, and DEs 
1 and 2. 

Figure 4-7(b) shows the masks for the second SCON 
instruction. Here, RCU 1, TCUs 1 and 2,-SEs 2 and 3, DE 
1, and IOCE 1 are selected. The configuration mask sets 
each element to state three with the SCON bit on to permit 
future reconfigurations by CE 1. Each selected element is 
also conditioned to communicate with CE 1. Note that in 
each of the above cases only the required configuration bits 
are transmitted to the respective elements. For example, 
the RCU, TCUs, and SEs do not receive SE bits; the RCU 
and TCUs do not receive the CE bit. Also note that only 
one DE was selected in this instruction because it is desired 
to configure the two DEs to different DGs. Therefore, a 
separate SCON instruction is required for each. 

Figure 4-7(c) shows the masks for the last SCON 
instruction. Here, SE 1 and DE 2 are configured to state 
three with the ability to communicate with CE 1. DE 2 is 
also configured to the required DGs. Again, the SCON 1 bit 
is set in both SE 1 and DE 2 to permit future reconfigura- 
tions by CE 1. 


Configuration Example 2 


Figure 4-8 shows the same 9020E system as Figure 4-6, but 
the unused elements of the system have been configured 
into two additional subsystems: 
Subsystem 2 - A state two subsystem composed of CE 2, 
IOCE 2, SE 4, DEs 3 and 4, and TCU 3. 
Subsystem 3 - A state zero maintenance subsystem 
comprising CE 3, IOCE 3, SE 5, DE 5, and RCU 2. 


Each of these subsystems is below the state three opera- 
tional level. All of the associated elements are immediately 
recallable by CE 1 to the active ATC system if the need 
arises. In the maintenance subsystem, however, complete 
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isolation can be achieved for any of the elements by setting 
the test switch on that element to the test position. In this 
state, the element cannot be taken from maintenance 
personnel without their permission. That is, maintenance 
personne! must take the element out of the test state before 
it can be recalled by the EXC program. 

Note that these subsystems must be set up by the EXC 
program that is using CE 1 at this time. CE | is the only CE 
in state three, a state in which the SCON instruction may 
be executed. This instruction can also be executed in state 
zero, but the EXC program normally protects the system 
from SCONSs issued in this state by ensuring that no active 
element has the SCON bit set in its CCR for a CE in state 
zero. Thus, no SCON issued by the state zero CE would be 
effective. 

A single SCON instruction is sufficient to establish 
subsystem 2 [Figure 4-9(a)]. The selection mask specifies 
all of the subsystem elements: CE 2, IOCE 2, SE 4, DEs 3 
and 4, and TCU 3. The configuration mask sets these 
elements into state two with SCON bit 1 on. The SCON bit 
allows the elements to accept future reconfiguration from 
CE 1. The configuration mask also sets up the proper 
communication bits in each element. 

Note that only one SCON instruction is required because 
of the configuration chosen. For example, if DEs 3 and 4 
were not to receive the same DG field bits (zeros in this 
example), an additional SCON instruction would be re- 
quired. Also note that as a result of setting up the entire 
subsystem with one SCON instruction, the CE receives its 
own communication bit. This has little significance except 
to enable the CE to execute a Write Direct instruction to 
itself for diagnostic purposes. 

The maintenance subsystem can also be established with 
one SCON instruction [Figure 4-9(b)]. The select mask 
includes all the elements in the subsystem: CE 3, IOCE 3, 
SE 5, DE 5, and RCU 2. The configuration mask sets the 
elements in state zero, and, again, SCON bit 1 is set on so 
that they can be recalled by the active ATC subsystem if 
their test switches are not turned on. Since each element 
receives only the configuration bits required for its CCR, 
the proper communication bits can be set in all elements 
with this one SCON instruction. 
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(b) Masks for Second Instruction 
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(c) Masks for Third Instruction 
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Figure 4-7. SCON Instructions for Configuration Example No. 1 


9020E Introduction (7/70) 4-13 


No. 2 
Storage Element 


lo. 
Storage Element 


No. 3 
Display Element 


No. 4 
Storage Element. 


makes tals 1253 
tal 07] 1 0.| © Os wl ies] 1p es 


No. 4 
Display Element 


No. 1 
Computing Element 


CE IOCE 


AARAARARAAAAD 


No. 1 
1/O Control Element 


No. 2 a 


Computing Element 
SCON SE 1OCE 
] 


a =a 
Ss 
HORA 
oo 


No. 2 r | 
1/O Control Element 


No. 5 7.) 
Storage Element 


No. 3 2 
Computing Element 


Sie [SOON [se OdYCCtSC*dSC(<“ SSC 


CE 
BGRAARAAAAR AAA 
O0/}1 3 2/;3/4]5 31445 2/3 
foe) 


| 
Tefofofefefot tafe fopo ti fefor feet 


No. 3 
1/0 Control Element 


No. | No. 2 


RCU RCU 
State | SCON 1OCE SCON 1OCE 


s|s i i A s|s 
01) 3 3 0} 1 3 3 
BGRAAR | | 1} 0 0 0 


DG 

1 414]515]6]6171]7 8 
A DIA}AlBlBiICcICIlDIDIA 
ofofofofo 


9020E Introduction (7/70) 4-15 


CE 
fi | | Anes ae) 4 
[OO LO] 110 


(a.) Masks for First Instruction 


Configuration Mask 
IOCE 


state | SCON [8d fied a 
g a 


Selection Mask 


aaaaae lets 
ERE tes sb ee 


(b.) Masks for Second Instruction 


| jt [2] 3) 
Fa Ea ce 


Legend: 
*Unused fields 


Figure 4-9. SCON Instruction for Configuration Example No. 2 


9020E Introduction (7/70) 4-17 


e Maximum of five SEs on 9020E system. 

e SEs may be accessed by four CEs and three IOCEs. 
e Maximum of five DEs on 9020E system. 

e Storage protection in SEs and DEs. 

e DEs may be accessed by four CEs. 

e Additional storage internal to each IOCE. 


Main storage in the 9020E system consists of a maximum 
of five IBM 7251-09 Storage Elements (SEs), each of which 
is a self-contained, self-powered unit capable of storing 
524,288 bytes of data. With all five SEs installed on the 
system, storage is provided for over 2-1/2 million individ- 
ually addressable bytes. 

Each of the five storage elements can be accessed by 
four CEs and three IOCEs. Data is transferred to and from 
CEs in doublewords (eight bytes) and to and from JOCEs in 
words (four bytes). The SEs have a faster storage cycle than 
IOCEs. The SE has a basic storage cycle time of 800 ns but 
can provide a doubleword every 400 ns if accesses are to 
alternate even and odd doublewords. This matches the 
speed of the CEs. The IOCE allows 2.5 usec for a storage 
cycle, however. For this reason, the SE is designed to 
provide its shorter cycle during the optimum portion of the 
IOCE cycle. This optimum time is different for store and 
fetch operations since it is dependent upon the time that 
data is available to and from the IOCE. 

The faster effective storage access time achieved when 
accesses are to alternate even and odd doublewords is due 
to storage interleaving which is discussed in detail later in 
this chapter. 

Each SE is equipped with storage protection (including 
fetch protection) to guard against the accidental destruc- 
tion of data in storage. To accomplish this, storage 
protection divides each storage element into blocks of 2048 
bytes each, the start of each block being at multiples of 
2048. 

Associated with each of the storage blocks is a five-bit 
storage key which is contained in a magnetic core storage 
array. The four high-order (leftmost) bits represent the 
storage key; the remaining low-order bit indicates whether 
fetch protection is to be enforced. Storage protection has 
no bit assigned as for fetch protection, and is always active 
except when the keys are zero. 


CHAPTER 5. STORAGE ADDRESSING 


A corresponding four-bit protection key is contained in 
the current PSW for CE operations or in the CAW for 
channel operations. During a store operation, for example, 
the four-bit storage key pertaining to the storage address is 
compared with the four-bit protection key supplied by the 
accessing element. 

The comparison results in either a match or mismatch as 
in the following: 


Protection Storage 

Key Key Condition 
x Xx Match 

X Y Mismatch 
x Zero Match 
Zero x Match 
Zero Zero Match 


(where X and Y are not equal to zero). 


A match condition allows the store operation to 
proceed; a mismatch causes the addressed location to 
remain unchanged and a “protect check” signal to be 
returned to the accessing element. 

During a fetch operation, the fetch (low-order) bit of the 
storage key is examined. If this bit is a 1 bit, the four 
high-order storage key bits are compared with the four 
incoming protection key bits. A successful match condition 
allows the data to be sent to the accessing element; a 
mismatch prevents the stored data from being loaded into 
an addressable register or moved to another storage 
location, and a protect check signal is returned to the 
accessing element. 

Note that in the 9020 mode of operation, as mentioned 
above, a match occurs when both keys are equal or when 
either one is zero. In 360 mode, a match occurs when both 
keys are equal or when the protection key is zero. 

The 9020E system has the capability to replace a 
malfunctioning SE through reconfiguration. To provide this 
backup capability, each of the five SEs may occupy any of 
the five 524,288 byte blocks of storage addresses between 
zero and the maximum valid address, which is 2,621,439 
(dec). To make possible this substitution of one SE for 
another, even though each SE responds only to its own 
block of fixed addresses, an address translation scheme is 
incorporated into the CEs and IOCEs. It involves the use of 
address translation registers (ATRs) in each CE and IOCE. 
The ATRs are set, under program control, according to the 
current structure, or configuration, of the system. Once 
address translation is established by the program, it is 
completely automatic. Accesses to a particular 524K byte 


9020E Introduction (7/70) 5-1 


areca of storage are automatically directed to the SE which 
is currently occupying that area. 

An elaboration of this address translation scheme per- 
mits the preferential storage area (PSA) for a particular CE 
to be located in any position in storage (on 4096-byte 
boundaries) and to be accessed automatically whenever a 
CE attempts to access an address smaller than 4096. This, 
too, is established under program control. It involves the 


use Of preferential storage base address registers (PSBARs) 
in each CE and IOCE. 

Display storage is provided for the 9020E system by a 
maximum of five IBM 7289-04 Display Elements (DEs). 
Each DE contains 262,144 bytes of storage, half the 
capacity of an SE. With the maximum of five DEs installed 
on the system, 1,310,720 bytes of display data may be 
stored. 

Each DE can be accessed by four CEs and up to four of 
eight attached Display Generators (DGs). Each DG repre- 
sents six character vector generators (CVGs) whose func- 
tion is to service the Plan-View Displays (PVDs). Thus, each 
DE can service up to 24 CVGs. 

In many respects, DEs are similar in structure to SEs. 
Data is stored and fetched by a CE a doubleword (cight 
bytes) at a time. Access time is 400 ns when consecutive 
odd and even doublewords are accessed as a result of 
interleaving. Storage cycle time is approximately 800 ns. 
Each DE is provided with storage protection and fetch 
protection. 

Like SEs, one DE may he substituted for another in the 
event of a malfunction. An address range equal to that of 
five SEs (starting at the upper limit of SE addresses) is 
divided into five blocks of 524,288 bytes each. Any of the 
five DEs may occupy the lower half of any of these five 
blocks (Figure 5-1). The address translation scheme of the 
9020E is used to translate logical addresses in these five 
discontinuous blocks to the fixed physical addresses of the 
DEs actually occupying the blocks. This address translation 
uses the same ATR as is used by the SEs. No provision for 
PSA accesses is made, however, since PSAs may not be 
located in display storage. 

In addition to the storage provided by the SEs and DEs, 
each IOCE contains a 32K word storage unit that is used 
for maintenance and channel operations as well as for IOCE 
processor operation. The Maintenance and Channel 
(MACH) storage unit in any IOCE can be accessed by that 
IOCE and by no other element. Therefore, the same address 
range exists in each IOCE. This range is above that of all 
main storage and is not contiguous with it. 

Addresses within MACH begin at 12,582,912 (dec) or 
CO 00 00 (hex). Since there is no storage internal to the 
IOCE with address less than CO0,000 (hex), it is simpler to 
look upon CO,00,00 (hex) as location zero in MACH. The 
two high-order bits may be thought of as an indicator 
enabling the IOCE and the programmer to distinguish 
which storage is intended, MACH or main. 
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Address Range 
Element 
Storage | Identifier Hexadecimal Decimal 


00 00 00 - 07 FF FF 000,000 - 524,287 
2 08 00 00 - OF FF FF 524,288 - 1,048,575 


3 10 00 00 - 17 FF FF 1,048,576 - 1,572,863 


18 00 00 - IF FF FF 1,572,864 - 2,097,151 


20 00 00 - 27 FF FF 2,097,152 - 2,621,439 
28 00 00 - 2B FF FF 2,621,440 - 2,883, 583 
2C 00 00 - 2F FF FF 2,883,584 - 3,145,727 


30_00 00 - 33 FF FF 3, 145,728 - 3,407,871 
34 00 00 - 37 FF FF 3,407,872 - 3,670,015 


38 00 00 - 3B FF FF 3,670,016 - 3,932, 159 
3C 00 00 - 3F FF FF 3,932,160 - 4,194,303 


40 00 00 - 43 FF FF 4,194,304 - 4,456, 447 
44 00 00 - 47 FF FF 4,456,448 - 4,718,591 


48 00 00 - 4B 00 00 4,718,592 - 4,980,735 


4C 00 00 - BF FF FF | 4,980,726 - 12,582,911 


CO 00 00 - Cl FF FF /12,582,912 - 12,713,983 


Legend: 

*The some address range exists in each IOCE. No confusion results from 
this because MACH is internal to each {OCE and cannot be accessed by 
any other element. 


Note: Shaded oreas represent unused, therefore invalid, address ranges. 


Figure S-1. 9020F Storage Address Ranges 


As stated previously, the MACH storage in an IOCE is 
used for maintenance purposes when the IOCE is off-line. 
Sufficient storage is available in MACH so that diagnostic 
programs may be run when no CE is available for 
maintenance subsystem. In normal operation on-line. how- 
ever, MACH is used for channel and IOCE-processor 
operation. The uppermost 4096 bytes of MACH are 
reserved for channel use in storing unit control words. The 
remainder of MACH storage is available to the [OCE 
processor. Under control of a CE, the IOCE processor may 
be assigned processing tasks to perform independently 
while the CE continues its own processing activity. The 
IOCE may access any configured main storage to which it 
has the proper key. as well as its own internal MACH 
storage. No other element. CE or IOCE. can access that 
IOCE’s MACH storage, however. Thus. no storage protec- 
tion is provided for MACH. 

Figure 5-1 shows the total range of addresses available to 
the 9020E system with maximum SEs, DEs, and IOCEs 
installed. Addresses are shown in both decimal and hexa- 
decimal notation. The column headed ‘‘Element Identifier” 
refers to the identifying character assigned to each SE and 


Original 


DE to denote its particular fixed address range. This 
identifier is used in the address translation hardware to 
relate logical and physical addresses depending on the 
current program-established system configuration. 


CE AND IOCE STORAGE ADDRESSING 

e CEs and IOCEs access storage differently. 

e SSU adapts SE to both CE and IOCE. 

e CEs access SEs and DEs in virtually the same way. 
e DEs are not accessed by IOCEs. 


Storage addressing in SEs and DEs is similar in many 
respects. Certain differences exist, however. The DE cannot 
be accessed by an JOCE; therefore, the circuitry in an SE 
which adapts an SE to IOCE accesses is not present in a DE. 
The DE must be accessible by DGs, but no actual 
addressing of the DE by the DGs is required, as will be seen 
later. The manner in which SEs and DEs are addressed by 
CEs is virtually the same. 


Addressing of Storage Elements 
e IOCE slower than CE. 


e IOCE time-shares bus to send address, key, and data. CE 
uses separate bus for each. 


e Address supplied by CE and IOCE has different format. 


e IOCE accesses 1 word at a time; CE accesses 2 words at a 
time. 


e IOCE cannot interleave requests. 


Address 


e SSU contains special registers for servicing IOCE 
requests. 


CEs and IOCEs differ in the manner in which they access 

storage in five major respects: 

1. The IOCE is slower than the CE. 

2. The IOCE time-shares a single bus for addresses, keys, 
and data, whereas the CE has a separate bus for each. 

3. The address formats of the CE and IOCE are different. 

4. The IOCE accesses a single word at a time; the CE 
accesses a doubleword (eight bytes). 

5. The IOCE is not designed to operate directly with a 
“two-way data interleaved” SE, as is the CE. 


At the SE, these five differences are reconciled by the 
Storage Switching Unit (SSU) portion of the SE. The SSU 
is also responsible for establishing the priority of requests 
from the attached IOCEs and CEs and for granting access to 
these elements according to the priorities. Beyond the SSU, 
in the storage section of the SE, accesses from both IOCEs 
and CEs appear the same, as a result of the SSU’s capability 
of adapting to both types of elements. 

The SSU adapts to the first four major differences by 
storing the address, key, and data received from the IOCE 
in separate registers so that it will be available to the faster 
storage section at the appropriate time. At the same time, 
differences in format are reconciled. Figure 5-2 shows the 
address information as it is derived from the original 
address by the IOCE and the CE, each in its own way. A 
comparison is shown between address bits as they appear 
on the bus from the IOCE and on the storage address bus 
(SAB) from the CE. In the SSU, the IOCE address 
information is preserved in a storage address buffer register 


| 


Bus 


SABR 


Box Tag Hi/Lo 


aS 


ee 


| | 


Figure 5-2. Storage Addressing Formats 
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(SABR). In the SABR, the format is similar to that of the 
CE SAB, the difference being that bits 20—23 (IOCE bus 
bits 28—31) are also preserved in SABR. 

The fifth difference between the IOCE and CE involves 
storage interleaving. This is discussed subsequently in this 
chapter. Again, it is the SSU which reconciles the difference 
so that all accesses appear the same to the storage section of 
the SE. 

Within the storage section, four basic storage modules 
(BSMs) provide the actual storage capability of the SE. 
Each BSM has a separate storage address register (SAR) 
which is usually called SE SAR to differentiate it from the 
SAR in an IOCE. Figure 5-2 also shows the format of the 
SARs. Note that the SAR bits are numbered differently 
from the SAB bits. 

Because of the aforementioned differences between the 
IOCE and the CE, certain differences in nomenclature exist. 
The bus from the IOCE to the SE is referred to as the 
“IOCE data, address, keys-in” bus in discussions of the 
SSU. The address portion is referred to as the IOCE SAB 
within the SSU. At the IOCE, the bus is called the “Output 
Bus”. Another difference in nomenclature exists with the 
“mark” bits which determine which bytes of data are to be 
stored and which are to be regenerated on a store cycle. At 
the IOCE, these are called “Byte Stats’’; at the SE, they are 
called “IOCE Marks’’. There are four IOCE marks and eight 
CE marks in keeping with the fact that an IOCE operates 
on a word basis and a CE operates on a doubleword basis. 
During a store operation, the Mark bits can be considered 
part of the addressing scheme since, at that time, bytes 
must be individually addressable, and the marks supply this 
individual addressing capability. 

With this background information in mind, then, storage 
addressing may be discussed. To avoid confusion, all IOCE 
address bits are discussed as they appear in SABR. Refer to 
Figure 5-2 to find the IOCE bus bit that corresponds to any 
SABR bit. 


CE Accesses 
e SCI synchronizes CE and SE operation. 


e Only 19 address bits sent to SE on SAB. 


e 1 parity bit sent on SAB and 2 parity bits sent on 
separate simplex lines. 


When a storage access is to be made by a CE, the storage 
control interface (SCI) portion of the CE generates the 
necessary signals to be transmitted to an SE. Since machine 
cycle time is not directly related to storage speed, the SCI 
must also synchronize CE and SE operation. 
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Note that only 19 bits are transmitted over the CE SAB. 
Bit 0 is not required because it represents an address greater 
than the maximum available storage. Bits 21—23 are not 
required because they represent portions of a doubleword, 
and a doubleword is the smallest amount of data which an 
SE can access. Bit 20 is not sent directly to the SE but is 
used at the CE for storage addressing, as is shown later in 
the discussion of storage interleaving. 

Special parity bits are generated for the SAB at the CE 
and again at the SE. The generated parity at the SE is then 
compared with the parity bits received from the CE. 

The parity bits for CE SAB consist of Pr for bits 1—S, 
P, for bits 6—12, and Pp for bits 13-19. Pp is sent along 
with the SAB bits, but Pa and PR are sent on simplex lines 
to allow time to generate these special parity bits for the 
seven-bit groups: 6—12 and 13-19. 


IOCE Accesses 
e 24 address bits plus 3 parity bits sent to SE. 


The IOCE transmits all three bytes of the address to the SE. 
Bit 8 of the IOCE bus is used only for parity-checking. The 
remaining bits are set into SABR, as shown in Figure 5-2. 
These bits are used by the SSU portion of the SE to 
perform the same functions as were performed by the SCI 
in the CE. In addition, the SSU must examine the low-order 
bits (bits 21, 22, and 23) to determine which word of the 
doubleword is to be stored or fetched and to select the 
correct byte for a Test and Set instruction cycle. 


SE Addressing Scheme 
e SE divided into even and odd areas. 
e CE issues even or odd select signals. 


For purposes of storage interleaving, the storage section of 
each SE is divided into an even half and an odd half. Each 
half consists primarily of two BSMs, high and low. This 
arrangement is shown in Figure 5-3. As will be shown 
subsequently, the addressing scheme for locating data 
within an SE may be altered by changing certain manual 
controls at the CE. However, it is important to note that 
from the point of view of the SE there is only one 
addressing scheme; a given bit pattern on SAB and a given 
select signal specify one particular doubleword location 
within the SE. 

Figure 54 illustrates an example in which ‘select even’ 
and a SAB-bit pattern of 000 1000 0000 0000 0001 are 


Even/Hi 


Even/Lo 


Odd/Lo 


Figure 5-3. Even and Odd Basic Storage Modules 


received at the SE. The manner in which these signals 

specify a particular doubleword location is as follows: 

1. The select signal determines whether the location is in an 
even or odd BSM pair. 

2. Bits 1—4 select the SE originally and are sent to it only 
for verification that the correct SE was selected. 

3. Bit 5 determines whether the doubleword is in a high or 
low BSM. 

4. Bit 6 determines whether the doubleword is in the upper 
or lower half of a BSM. A zero specifies the lower half; a 
one specifies the upper half. 

5. Bits 7—19 determines which doubleword location, with- 
in a particular BSM half, is to be accessed. 


Thus, for the bit pattern and select signal shown, the SE 
accesses the doubleword shown by the crosshatching. 


Storage Interleaving 


e Consecutive doublewords alternated between even and 
odd BSMs. 


e CE can: 
1. Interleave. 
2. Defeat interleaving. 
3. Defeat interleaving and reverse storage addressing. 


e@ IOCE does not interleave requests. 


Storage interleaving refers to the interleaving of data from 
different BSMs on the storage buses so that the buses may 
be used more efficiently. To accomplish this, a storage 
cycle in one BSM is started before the storage cycle in 
another has been completed. Because storage common 
circuitry is not used by a BSM during the write half of the 
cycle, the read half of one BSM cycle may be overlapped 
with the write half of another BSM cycle. This provides a 
shorter effective access time. 


Obviously, consecutive accesses to the same BSM cannot - 
be overlapped. To decrease the probability that consecutive 
accesses will be to the same BSM, the normal addressing 
scheme is designed to place consecutive doublewords in 
different BSMs, thus permitting interleaving to occur. That 
is, even doublewords are placed in an even BSM and odd 
doublewords are placed in an odd BSM. Even and odd do 
not refer to addresses, since all doublewords have even 
addresses. Figure 5-5 shows consecutive doublewords num- 
bered in decimal, starting with doubleword zero. It is this 
decimal numbering of doublewords that determines 
whether they are even or odd. 

For diagnostic purposes, interleaving may be defeated 
(inhibited) by changing the addressing scheme so that 
consecutive doublewords are placed in the same BSM, 
either the odd or the even. This change in the addressing 
scheme is accomplished at the CE and does not alter the 
manner in which the SE interprets the SAB and select 
signals. 

From the viewpoint of the CE, however, the addressing 
scheme takes three different forms: (1) storage interleaving, 
which is the normal mode of operation; (2) defeat 
interleaving; and (3) defeat interleaving with storage re- 
verse. These three addressing schemes result from manipula- 
tion of the address bits at the CE before sending the SAB 
bits and select signals to the SE. The three addressing 
schemes are selected from a three-position DEFEAT 
INTERLEAVING switch on the CE control panel. This 
switch alters the manner in which the CE interprets address 
bits 6 and 20 in developing the SAB and select signals. The 
three addressing schemes are described below. 


Normal Storage Accessing with Interleaving Active. Figure 
5-6(a) shows how doublewords are placed in the BSMs of 
an SE when interleaving is active. The arrows show 
consecutive doublewords being placed in storage, starting 
with doubleword zero. Remember that the numbering of 
the doublewords refers to the decimal numbering shown in 
Figure 5-5. 

Figure 5-6(b) shows, in simplified form, the manner in 
which the address bits are interpreted at the CE in the 
development of the SAB and select signals. All address bits 
except bits 6 and 20 are carried through to become the 
corresponding SAB bits. Bits 6 and 20 are effected by the 
DEFEAT INTERLEAVING switch which is shown in the 
process (PROC) position used in normal operation. Note 
that bit 20 (the lowest-order bit having significance in a 
doubleword storage) is used to develop the odd and even 
select signals. This low-order bit represents one doubleword 
and changes from a one to a zero alternately as consecutive 
doublewords are addressed. A one bit develops a ‘select 
odd’ signal; a zero bit develops a ‘select even’ signal. This 
alternation of select signals produces the alternation be- 
tween BSMs shown by the arrows in Figure 5-6(a). 
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(a) Simplified Representation of SE Doubleword Locations 
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(b) Simplified Interleaving Control Logic in CE 
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Figure 5-6. Consecutive Doubleword Locations (Normal Interleaving) 
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Figure 5-7. Consecutive Doubleword Locations (Interleaving Defeated) 
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With the DEFEAT INTERLEAVING switch in the 
position shown, address bit 6 is carried through to become 
SAB (6). When the two lower halves of the lower BSMs are 
filled with data, the address has been incremented to the 
point that bit 6 becomes a one. It will be recalled from 
Figure 5-4 that SAB (6) selects the upper half of a BSM if it 
is a one. Thus, the upper halves of the two lower BSMs are 
filled by subsequent doublewords. When SAB (5) becomes 
a one, the two upper BSMs begin to fill in the same 
interleaved fashion. 


Defeat Interleaving. In the event of a malfunction in the 


odd half of an SE, interleaving can be defeated so that a 


program can be loaded into the even half only. Thus, a 
diagnostic may be loaded into the even half and used to test 
the odd half of the same SE. As will be seen, the low-odd 
BSM also becomes available if the malfunction is restricted 
to the high-odd BSM. However, this is normally more 
storage than is required for testing. 

Figure 5-7(a) shows how consecutive doublewords are 
placed in an SE when the DEFEAT INTERLEAVING 
switch is placed in the ‘“‘no reverse” (NO REV) position at 
the CE. The significance of the NO REV nomenclature is 
explained later in this discussion. Note that doubleword 0 is 
placed in the same location as if interleaving were active; 
i.e., in the first doubleword location of the even-low BSM. 
Doubleword 1 (an odd doubleword) is placed in the upper 
half of the same even BSM, however. The arrows at the 
right of the even-low BSM show how even and odd 
doublewords are alternately placed in the upper and lower 
halves of the BSM. This alternation does not constitute 
storage interleaving since all accesses are to the same half of 
storage, and one storage cycle must be completed before 
another can be started. It does reduce electrical noise 
within the BSM by storing consecutive doublewords in 
widely separated locations, however. 

Figure 5-7(b) shows the simplified interleaving control 
logic at the CE with the DEFEAT INTERLEAVING switch 
in the NO REV position. Note that address bit 6 is now 
used to develop the odd and even select signals. Since 
address bit 6 represents 128K bytes of storage (the amount 
of storage in one BSM), it does not change until all of the 
even-low BSM has been filled. Note also that address bit 20 
is now substituted for address bit 6 to develop SAB (6). 
Thus, bit 20, which causes the alternation between even 
and odd BSMs when interleaving is active, causes the 
alternation between upper and lower halves of the same 
BSM when interleaving is defeated. 

Returning to Figure 5-7(a), it can be seen that the 
alternation between upper and lower halves of the even-low 
BSM continues until the highest-numbered doubleword in 
the BSM (doubleword number 16,383) is accessed. Bit 6 
now becomes a one, causing the odd half of storage to be 
selected. Subsequent doublewords are accessed alternately 


from the upper and lower halves of the odd-low BSM. After 
the odd-low BSM has been filled, bit 5 (which represents 
256K bytes) becomes a one, and bit 6 again becomes a 
zero, causing the even-high BSM to be accessed. When bit 6 
again becomes a one, the odd-high BSM is accessed. 


Defeat Interleaving with Storage Reversed. Figure 5-8(a) 
shows how consecutive doublewords are accessed when the 
DEFEAT INTERLEAVING switch is placed in the “‘re- 
verse” (REV) position. Note that doubleword 0 is placed in 
the first doubleword location in the oddlow BSM instead 
of the even-low BSM. This reversal of accesses to odd and 
even storage permits a program to be loaded into the odd 
half of storage when a malfunction occurs in the even half. 
This is the significance of the two positions of the DEFEAT 
INTERLEAVING switch, NO REV and REV. 

The manner in which doublewords are accessed with 
interleaving defeated and storage reversed can be seen by 
following the arrows in Figure 5-8(a). Note in Figure 5-8(b) 
that the DEFEAT INTERLEAVING switch is shown in the 
REV position. Address bit 20 is still substituted for address 
bit 6 in the development of SAB (6). Address bit 6 is 
inverted, however, before it is used to develop the even and 
odd select signals. This inversion results in the reversal of 
storage. 


Effect of DEFEAT INTERLEAVING Switch on IOCE 
Accesses. As noted previously, the IOCE has no internal 
provision for accessing an interleaved storage. The effect of 
this appears when the DEFEAT INTERLEAVING switch 
on the contrclling CE is placed in the REV or NO REV 
position. Since the SE depends on the accessing element to 
establish the correct select and SAB signals, IOCE accesses 
during the time that DEFEAT INTERLEAVING is active 
would be to the wrong storage locations unless corrective 
measures were taken. Two interface lines extend from the 
CEs to the SEs to inform the SSU whether defeat 
interleaving or storage reverse is active. These signals enable 
the SSU to manipulate address bits received from an IOCE 
so that the appropriate storage location is accessed. 


Addressing of Display Elements 


e CE addressing of DE same as for SE except bit 5 must be 
0. 


e DG requests to DE do not supply storage address. 


As stated previously, storage addressing on CE accesses is 
the same for SEs and DEs. One minor difference exists, 
however; bit 5 on the SAB must always be zero when 
addressing a DE. Recall that bit 5 determines whether the 
high or low half of an SE is selected. Since only addresses in 
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Figure 5-8. Consecutive Doubleword Locations (Interleaving Defeated and Storage Reversed) 


5-10 (7/70) , 


the lower half of the 524K byte block assigned to a DE are 
valid, bit 5 must not be a one. Addresses to the invalid 
address ranges between DEs result in a program interrupt 
with “‘addressing”’ indicated in the program old PSW: 

Storage interleaving and defeat interleaving are effective 
in the DE as well as in the SE. The discussion under 
“Storage Elements” in this section may be referred to for 
details if it is remembered that references to IOCE action 
do not apply to the DE. 

DG access to a DE does not involve external addressing 
of the DE. The DGs can be attached to only one DE at a 
time so that no selection of a DE by a DG is required. 
Further, addressing during a CVGs requests for data is 
controlled by the DE itself as a result of programming. 
Refer to the IBM 7289-04 Display Element Theory of 
Oyieration Manual, for additional information. 


STORAGE ADDRESS TRANSLATION 
e Provides dynainic address relocation among SEs. 
e Under program control. 


A 9020E system can contain as many as five storage 
elements and five display elements. Each CE and IOCE in 
the system can access any SE, and each CE can access any 
DE. Each of the physical SEs and DEs represents a block of 
addresses of 524,288 bytes, although only the lower half of 
each block is actually available in a DE. Through program- 
ming, the 9020E system can alter its configuration to 
respond to additional system loads or to replace failing 
elements. Address translation is the means by which the 
9020E system replaces storage elements or display elements 
without time-consuming reinitialization of programs. The 
reinitialization is eliminated by automatically translating 
storage addresses, principally by means of an address 
translation register. 


Logical versus Physical Addresses 
e 5,242,879 bytes of logical addresses. 
e ATR slots identify physical SEs and DEs. 


e PSBAR identifies PSA in SE. 


The maximum range of logical main storage addresses in the 
9020E system is from 0 to 5,242,879 bytes (dec), including 
the invalid portions in the DEs. This logical address range is 
broken into 10 groups of 524,288 bytes each. The physical 
address range in any given SE or DE is fixed. For example, 
SE 3 has the range of physical addresses from 1,048,576 


(dec) to 1,572,863 (dec). However, this range may be 
substituted for any of the 10 groups of logical addresses via 
the programmed setting of the ATR. The ATR contains 10 
“slots” in which physical SE and DE identifiers may be 
placed. For example, if the programmer has placed SE 3 
into ATR slot 1 and subsequently wishes to access address 
5000 (dec), the physical address 1,053,576 will be sent to 
SE 3 as a result of address translation. This address is the 
sum of 5000 and the lowest address in SE 3. Since SE 3 is 
the lowest configured SE in the ATR, the programmer has 
accessed a location 5000 up from the bottom of storage, 
just as he intended. 

The programmer, in effect, writes programs using “logi- 
cal” addresses. However, the 9020 system requires “‘physi- 
cal” addresses when accessing an SE or DE. Thus, address 
translation is defined as the conversion of a programmer’s 
logical address into the machine’s physical address. 

Storage accesses.are of two types: (1) normal accesses 
for data or instructions and (2) accesses for control 
information (PSW, CAW, CSW) in a preferential area of 
storage. This preferential storage area (PSA) is always in an 
SE; a DE cannot contain a PSA. These two types of 
accesses are treated differently. The PSA is accessed by 
means of a preferential storage base address register 
(PSBAR), which is described later. 


Normal Data Accesses 
e Address bits 8—12 specify logical address of SE or DE. 


e Address bits 13—31 specify physical address within SE 
or DE. 


For simplicity, the logical storage address (bits 8—31) may 

be thought of as divided into two parts: 

1. Address bits 13—31, which select an address within a 
logical storage or display element. 

2. Address bits 8—12, which select a particular logical 
storage or display element. 


Essentially, address bits [3—31 go directly from the CE 
or IOCE to the selected SE or from the CE to the DE. 
Address bits 8—12, however, must be translated from a 
logical element into a physical element. Translation occurs 
in the CE/JOCE’s address translation register (ATR). Figure © 
5-9 shows the formation of a physical storage address from 
a logical storage address. In this example, which is a 
simplification of the actual logic involved, logical SE 3 
points to the thiru slot i» ATR; this slot contains the bit 
coutiguration for p'isicai SE 4. Thus the physical storage 
address which is sent out on the CE/JOCE-to-SE bus 
comprises bits from ATR and bits from a logical storage 
address. 
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Logical storage address 
in CE or IOCE 


Logical SE 3 Any one of 131K words 


8 12 13 31 


Logical SEor DE-™1 23 4 5 6 7 8 9 10 
SE's Only DE's Only 
BOOBRREERE 


Address translation register 
{may contain up to 5 SE's 
and up to 5 DE's). 


Physical storage address 
to selected element. 


Physical SE 4 Any one of 131K words 


8 12:13 31 


Note: SE's can occupy only ATR slots 1-5; DEs 
can occupy only ATR slots 6-10. 


Figure 5-9. Address Translation Simplified 


Programming instructions place the desired information 
into ATR. By the Set Address Translation Register (SATR) 
instruction, the programmer tells the system which physical 
element to access when a given logical element is addressed. 
Normal accesses for data use only ATR to develop a 
physical storage address; normal accesses may be considered 
non-PSBAR accesses. Accesses into the preferential storage 
area use physical PSBAR to develop part of the physical 
storage address. These PSA accesses must be to an SE. 


PSA Accesses 
e Logical address bits 8—19 equal 0. 


e Physical address sent to SE combined from three 
sOUICES: 
1. Address bits 20-31 from logical address. 
2. Addres s bits 13—19 from logical PSBAR. 
3. Address bits 9-12 from physical PSBAR. 


The preferential storage address area contains control 
information such as logout data, PSW, CAW, and CSW. This 
PSA area consists of 4K bytes of control data that can be in 
any of 128 blocks of any storage element. A storage access 
request for the PSA area is defined by a logical address 
containing all zeros in bits 8-19. (From the programmer’s 
point of view, the lowest 4K bytes of storage are being 
addressed.) As with a normal access for data, it is necessary 
to convert the logical address in the CE/IOCE to a physical 
address sent to an SE. 
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The programmer determines the SE to contain the PSA 
area and which one of the 128 blocks is to be used. The 
load PSBAR instruction (LPSB) sets into logical PSBAR the 
high-order bits of the preferential storage base address. Bit 
8 is not included in PSBAR, since no valid address is 
available in the 9020E main storage that uses the highest- 
order bit. However, it is checked to ensure that it is a zero. 
An invalid address check occurs if it is a one. Physical 
PSBAR is set at the same time (Figure 5-10). For a PSA 
access, the physical address sent to the SE has three parts: 
1. Bits 20—31 from the logical address in the CE/IOCE. 

2. Bits 13-19 from logical PSBAR. 
3. Bits 9-12 from physical PSBAR. 


As with normal data accesses, ATR converts the pro- 
grammer’s logical SE into the system’s physical SE. ATR, 
which is program-loaded, contains 10 four-bit slots that 
identify the physical SE/DE assigned to each logical SE/DE. 
The first five of these slots can contain only SEs; the last 
five can contain only DEs. Similarly, physical PSBAR 
contains four bits that identify a physical SE, the one 
containing the PSA area. Physical PSBAR is loaded via one 
of the first five slots in ATR from logical PSBAR. This is 
done whenever logical PSBAR is loaded (LPSB, IPL, PSW 
restart, or external start) or stepped. Bits 9-12 of logical 
PSBAR are decoded to obtain the ATR slot, and the 
contents of this slot are then set into physical PSBAR. 

If a storage element fails as the PSA is being accessed, 
the CE automatically steps to the next configured SE and 
places the PSA data in an alternate PSA. Since PSBAR 
(13-19) does not change, the alternate PSA occupies the 
same relative position in the new SE as the PSA occupies in 
the original SE. On a PSA-access storage failure, the PSBAR 
counter steps sequentially through the ATR positions until 
the next configured SE is found. If no configured alternate 
is found by the time slot 5 is decoded the second time, 
stepping stops and the CE hardstops and issues ELC. 


Address Translation Register (ATR) 

e 40-bit register. 

@ One register in each CE and IOCE. 

e Translates “logical” addresses into “physical” addresses. 


Each of the five SEs and five DEs is represented in the 
CE’s ATR. 


Each of the five SEs is represented in.the IOCE’s ATR. 


Logical Address 


in CE or IOCE 
19 19420 
| | 
| | 
Logical PSBAR Logical SE 3 One of 128 PSA's 
9 12 13 19 


ATR 
Slot 


Decoder 


DE's ee 


Logical SE's and DE's——~™ 1 23 4 5 eee 7 8 9 10 


ATR contains up 


All Zeros Address within PSA area 


31 


AIR™ 2/3)415 to 5 physical SE's 
and up to 5 


physical DE's. 


Physical PSBAR SE 4 


Physical Address 


Physi 
is . = i : i a 


9 12 13 19 20 


Figure 5-10. Preferential Storage Address (PSA) Formation 


As already mentioned, each CE and IOCE is capable of 
accessing each of the five SEs within the system. Therefore, 
to accomplish translation from within the entire system, an 
address translation register must be located in each of the 
CEs and IOCEs. Because the same CE and IOCE is used in 
both the 9020D and 9020E systems, each element contains 
a 40-bit register. Plugcards in the CE are properly plugged 
during system installation to establish the addressing 
capability. These plugcards establish whether the element is 
in a 9020D or a 9020E system and how many SEs and DEs 
are actually installed. 

The entire ATR is a 40-bit register [Figure 5-11(a)] and 
consists of a 32-bit ATR 1 and an 8-bit ATR 2. The entire 
register logically consists of 40 continuous bits but is 
divided into ATR 1 and ATR 2 because of the 32-bit data 
paths of the IOCE. 

The ATR is further divided into ten 4-bit sections, or 
slots. Each slot, starting at ATR 1 (0—3) and continuing 
through ATR 2 (4—7), contains the translation identifier 
for logical SEs 1 to 5 and logical DEs 1 to 5, respectively. 
These identifiers consist of the 11 hexadecimal characters 
0-A. Character 0 indicates that this logical SE is unassigned 
(not to be used); characters 1—S represent physical SEs 


3] 


1—5, respectively; characters 6—A represent physical DEs 
1—5, respectively; characters B, C, D, E, and F are 
considered invalid. [Figure 5-11(b)] shows the identifiers 
and the corresponding SEs and DEs. The corresponding 
range of actual addresses is shown in Figure 5-1. 

Figure 5-11(c) shows a simple, straightforward ATR 
setting where both the three logical and three physical SEs 
are the same and the three logical and three physical DEs 
are the same. The remaining elements are unassigned. 

Figure 5-11(d) shows five assigned SEs. In this case, 
program references to SEs 2 and 3 will be serviced by SEs 4 
and 5, and references SEs 4 and 5 will be serviced by SEs 2 
and 3. Further, references to DEs 1 and 3 (identifiers 6 and 
8) will be reversed; DE 1 will service DE 3 references and 
vice versa. 


Set Address Translator Instruction (SATR) 


e RR format. 


e Establishes system address translation for all CEs and 
IOCEs. 
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e Receiving elements are determined by a selection mask. 


e Receiving elements must have their SCON bits set to the 
sending CE. (See ‘‘Condition Code - 1”’.) 


By means of the SATR instruction, a CE can establish the 
appropriate storage assignments for “‘itself”’, the IOCEs, and 
other CEs under its immediate control. The assignment is 


—— Logical SEs 


a 


(a) Address Translation Register Format 


Physical 
Storage 
Reference 


KKK 


SE } 
SE 2 
SE 3 
SE 4 
SE 5 
DE 1 
DE 2 
DE 3 
DE 4 
DE 5 
invalid 
Invalid 
Invalid 
Invalid 
Invalid 


7AMONFpPpWOOMNeOUARWN—O 


(b) ATR Storage Identifiers 


Logical SEs 
1 2 3 4 =5 2 6 


(c) ATR Example, Simple 


Logical SEs Logical i 
10 


(d) ATR Example 


*These 10 positions of the ATR represent the logical storage. 
**The identifier character contained in these four bits represents 
the physical storage which is actually accessed. 
***Indicate an unassigned logical element. 


Legend: 


Figure 5-11. Address Translation Register 
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accomplished by loading the 10 proper storage identifier 
characters into the address translation register of each of 
the selected CEs and IOCEs. These identifier characters 
were discussed in the previous section and are listed in 
Figure 5-11(b). 

The registers specified by R1 and R2 of the SATR 
instruction contain the necessary data for execution of the 
operation (Figure 5-12). The 32 bits of R1 plus bit 
positions O—7 of R2 represent the 40-bit ATR setting 
(assignment mask) to be sent to the selected CEs and 
IOCEs. 

Selection of the proper elements is designated by a 
selection mask located in bit positions 24—31 of R2 (Figure 
5-13). By means of this selection mask, the issuing CE can 
select any combination of CEs and IOCEs (including itself) 
to receive the new ATR setting. Bits 8 to 15 are ignored. 
Bit positions 16~-23 of R2 (Figure 5-13) are initially 
ignored but will eventually represent a response indication 
from the selected elements in a manner similar to execution 
of the SCON instruction. 


bakes SEs ara es i 


112 15116 23 24 27 28 vu 


(a) Register Format Specified by RI. 


Logical 
DEs 


9 10 


(Ignored) | Response Selection 
Mask Mask 


15.16 23:24 


(b) Register Format Specified by R2. 
Legend: 


* These 10 positions of the registers represent the 
"logical" storage. 
** The identifier character contained in these four 
bits represents the "physical" storage. 


Figure 5-12. Register Formats as Specified by Rl and R2 of the 
SATR Instruction 


Element Response 
Mask Bit 


CE | 
CE 2 
CE 3 


Selection 
Mask Bit 


CE 4 
(Unassigned) 
IOCE | 
IOCE 2 
1OCE 3 


Figure 5-13. Selection and Response Mask Formats for the SATR 
Instruction 


a anaes 


At the time of installation, each CE has an assignment 
card installed which indicates the maximum number of SEs 
and DEs installed on that system. Ey means of the 
information available from this card, microprogramming 
tests to ensure that an SE or DE identifier character has 
been properly assigned and is within the specified range of 
the system. 

Execution of the SATR instruction is subject to internal 
checking by both microprogramming and hardware. A 
specification check (interrupt code 110) results from a 
violation of any one of the following conditions: 

1. The issuing CE must be in state three or state zero. 

2. The issuing CE must have its own SCON bit on. 

3. The identifier characters in the ATR must reference only 
the valid SEs and DEs assigned to the installation. These 
are determined by the pluggable assignment card in- 
stalled in the CEs. 

4. At least one of the valid identifiers must be a non-zero 
character. Because a zero identifier character indicates 
an unassigned storage module, an all-zero ATR would 
not designate any usable storage. 

5. No SEs may be assigned to ATR slots 6—10, and no DEs 
may be assigned to ATR slots 1—5. 


Two other program interruptions can occur besides the 
specification check. An invalid operation interrupt (inter- 
rupt code 1) occurs if the CE is in 360 mode instead of 
9020 mode. A privileged operation interrupt (interrupt 
code 10) occurs if the SATR instruction is attempted in the 
problem state instead of the supervisory state. In addition 
to these program interrupts, condition code settings also 
supply the program with additional information. 

Condition Code - 0: Indicates that all selected elements 
have accepted the new identifier characters (assignment 
mask) into their address translation register. This indicates a 
successful completion of the SATR instruction. In this case, 
the original contents of the response field (byte 2 of R2) 
are unchanged. 

Condition Code - 1: Indicates that the SATR instruction 
was not completed because one or more of the selected 
elements did not respond to the initial selection by the 
issuing CE. 

Before the ATR contents are actually transmitted to the 
selected elements, the issuing CE tests each element to 
determine whether it is able to respond. Bit positions 
16—23 of R2 represent a response mask similar in format to 
the select mask in bit positions 24—31 of R2 (Figure 5-12). 
At the end of this test, any element that fails to respond is 
indicated by a 1-bit in the corresponding response mask 
position in byte 2 of R2; all other bits in the response mask 
are set to zero. By analyzing these bits, the program can 
determine the element or elements responsible for termina- 
tion of the instruction. 


In order to respond initially to the SATR instruction, 
the receiving element must have its CCR SCON field set to 
the sending CE. If the receiving element is another CE, that 
CE must either be in the wait state or must reach an I-fetch 
within the selection period in order to respond. If the 
receiving element is an IOCE, it will respond after finishing 
the current storage cycle, provided that a CE communica- 
tion bit is on and the element is not in the process of 
resetting. 

Condition Code - 2: Indicates that one or more of the 
selected elements failed to properly accept the new 
assignment mask into its ATR. 

In this case, the element responded to the initial 
selection, but a parity check or internal logic check 
prevented it from accepting the new setting. The response 
mask in R2 (16—23) again allows the program to determine 
the particular element or elements at fault. The selected 
elements which do not have a corresponding 1-bit in the 
response mask have received the new ATR setting. As 
mentioned previously, a successful response from all ele- 
ments results in an unchanged response mask and a CC = 0. 

If a check condition occurs in a receiving CE, that CE 
immediately proceeds to log out into its PSA area (provided 
that PSW 13 is on) and issues an element check (ELC) 
signal to all CEs within the system. 

If a check condition occurs in a receiving IOCE, that 
IOCE requests a machine check interrupt (for logout) from 
the issuing CE. 

By analyzing the logout data areas for the malfunction- 
ing element, the control program can try to determine why 
the ATR assignment mask was not accepted. 

Condition Code - 3: Indicates a selection mask of all 
zeros. In this case, no elements (CEs or IOCEs) were 
designated for selection of the new ATR setting. 

As can be seen, extensive testing is performed to ensure 
that an authorized CE is issuing the instruction; only 
authorized elements are receiving the new ATR setting; the 
translation identifier characters are properly used; and the 
settings were successfully received. 


Insert Address Translator Instruction (IATR) 


e RR format. 
e Inserts the 40-bit ATR into R1 and R2. 


The IATR instruction places the contents of the 40-bit 
address translation register in the two registers specified as 
R1 and R2 of the instruction. The high-order 32 bits of the 
ATR (corresponding to SE 1—5 and DE 1-3) are placed in 
R1; the low-order 8 bits (corresponding to DEs 4 and 5) are 
placed in O—7 of R2. Bits 8—31 of R2 are set to zeros. 
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Instruction execution is such that if R1 and R2 are 
specified as the same register (i.e., RI=R2) the high-order 
32 bits of the ATR are inserted in that register. This is an 
advantage because programmers need not disturb a second 
general-purpose register when executing the IATR instruc- 
tion for systems containing fewer than four DEs. 

Note than execution of the IATR only allows the CE to 
examine its own ATR. If a controlling CE wishes to analyze 
the ATR of other system elements, it may do so by issuing 
an external logout to that element by means of the WRD 
instruction. 


Address Translation Example No. 1 


Assume that the overall system is configured into three 
subsystems, as shown in Figure 5-14. In each of the 
subsystems, the lowest logical SEs are assigned for use of 
their operating programs. The state three ATC subsystem is 
using physical SEs 1 and 2 in direct correlation to their 
logical assignments. The state two subsystem is using 
physical SEs 3 and 4 and assigning them to logical SEs 
(ATR slots) 1 and 2, respectively. The state zero main- 
tenance subsystem is using only one SE, SE 5, assigned to 
logical SE 1. 

Programs are generally written starting in low storage 
areas and overflowing into as many more SEs are necessary. 
Thus, the programs can be run in any of the various 
subsystems relatively independently of the availability of 
physical elements by simply assigning the available (physi- 
cal) SEs to the logical elements with low-order numbers. 

The diagnostic programs being run in the state zero 


subsystem will most likely be written to addresses within 
logical SE 1. In this example, then, SE S is assigned as 
logical SE 1. 

In addition to the SE assignments, DEs have also been 
assigned. The state three subsystem is using DEs 1 and 2. It 
must be remembered that these elements bear identifiers 6 
and 7 and that it is the identifier which appears in the ATR. 
Physical DEs 1 and 2 have been assigned to the correspond- 


ing two lowest DE slots in the ATR, slots 6 and 7. 
The state two subsystem has physical DEs 3 and 4 


(identifiers 8 and 9) assigned to logical DEs 1 and 2 (ATR 


slots 6 and 7). 
The maintenance subsystem has DE 5 (identifier A) 


assigned to ATR slot 6. 
To accomplish the three subsystem assignments, three 


SATR instructions must be executed by the EXC control 
program. The contents of general-purpose registers R1 and 
R2 for each assignment are shown in Figure 5-15. 

Figure 5-15(a) shows the state three SE and DE 
assignment mask with its selection mask selecting CE 1 and 
IOCE 1. Figure 5-15(b) shows the state two SE and DE 
assignment mask and its selection mask selecting CE 2 and 
IOCE 2. Figure 5-15(c) shows the maintenance state zero 
assignment mask for SE 5 and the selection mask selecting 
CE 3 and IOCE 3. 
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Note in Figure 5-14 that for each of the physical SEs 
assigned to that subsystem there is a corresponding config- 
uration bit assigned within the CCR of the CE and IOCE. 
For example, in the state zero subsystem, where physical 
SE 5 is assigned to logical SE 1, the CCR of both CE 3 and 
IOCE 3 has been configured with a 1-bit corresponding to 
SE 5. Similarly, the CEs have the proper communication 
bits in their CCRs to enable communication with the DEs. 

Note that the DE identifiers appear in the ATRs of the 
IOCEs as well as the CEs. This results from selecting both a 
CE and an IOCE for an ATR assignment during execution 
of the SATR. This causes no problem since the IOCEs are 
not configured to elements with DE identifiers. If the 
IOCEs were configured to such elements and attempted to 
access them, an invalid address check would result, since 
the plugcards installed in the IOCEs would show no such 
elements installed. 


Address Translation Example No. 2 


From ATR example No. 1, assume that SE 2 shows signs of 
trouble. The EXC program therefore, decides to recall SE 5 
from the maintenance subsystem into the state three 
subsystem and reassigns SE 2 to the maintenance subsystem 
for checkout. This reassignment involves exchanging physi- 
cal SEs 2 and 5, but the logical assignment remains the 
same; ‘i.e., the active program storage references are not 
changed, but a different storage element is used in the 
operation. 

In addition to exchanging SEs 2 and 5, assume that the 
EXC program requires an additional DE for the state three 
subsystem and that it takes DE 5 (identifier A) from the 
state zero subsystem. 

To accomplish this reassignment, two SATR instructions 
are required. The contents of general-purpose registers R1 
and R2 for each SATR instruction are shown in Figure 
5-16. Figure 5-16(a) shows the state three assignment mask 
with the identifier character 5 replacing the character 2 in 
the logical SE 2 position. Also, the identifier A, for DE 5, 
has been added in the logical DE 3 position. The selection 
mask selects CE 1 and IOCE 1. 

Figure 5-16(b) shows the state zero subsystem assign- 
ment mask with SE 2 replacing SE 5 in the logical SE 1 
position and a zero inserted in the logical DE 1 position. 
The selection mask selects CE 3 and IOCE 3. No SEs or 
DEs were reassigned within subsystem two; therefore, no 
SATR operation is needed for that subsystem. 

Figure 5-17 shows the final settings after execution of 
the SATR instructions. Note that, with the reassignment, a 
reconfiguration by means of the SCON instruction is also 
necessary to configure SE 2 out of the ATC subsystem and 
into the maintenance subsystem and vice versa. This same 
SCON can configure DE 5 out of maintenance subsystem 
and into the ATC subsystem. 
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Legend: 


@ State Three AlC Subsystem 
B State Two Subsystem 


@ State Zero Maintenance Subsystem 


Figure 5-14. Address Translation Example No. 1 
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$=; Logical SEs i Logic DEs —+ 


12 15.16 23:24 27 28 
ao =e Ma a 
f= | d 
Logical DEs a Ignore ne Kesle os ae Mosk 


R2 0000/0 00 0)/0 00 010000)/00000000 0000 


12 1516 23:24 


(a) First SATR Instruction 


teal SEs ——-—— Logical DEs ——+| 


W412 1516 23 24 27 28 


eo a —*| 
}+— Lesiee! DEs eS a Mask Kode 


000 010 00 0/0000/0000j000000 0 0/0 000 0 


142 15 16 23 24 


R2 


(b) Second SATR Instruction 


-———— Logical SEs SS Logical DEs a 


Rl Foe oe es een occ ae Geo Oe 


11:12 15 16 19 20 23 24 27 28 


Response Selection 
pe lesicel cae Seas Ignored code > ais Mask : 


000 0);/0 00 0/0 00 0/0 000;/000000 0 0/0 0 0000 


V1 12 15 16 23 24 


R2 


(c) Third SATR Instruction 


Figure 5-15. SATR Formats for Example No. 1 
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(a) First SATR Instruction 
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(b) Second SATR Instruction 


Figure 5-16. SATR Formats for Example No. 2 
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Figure 5-17. Address Translation Example No. 2 
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The SATR instruction can be executed by the EXC 
control program at any time. However, note that this type 
of programming could have disastrous results if, for 
example, an address reassignment were made in the middle 
of a program in a CE. 

If a CE is in the wait state during receipt of an SATR 
command, it will return to the wait state at the completion 
of the reassignment. If the CE was not in the wait state, the 
reassignment will be performed and the CE will return to 
I-fetch. This next I-fetch, however, may now fetch the 
wrong instruction or may try to operate on a data word in 
some new SE. 

To avoid problems of improper execution or loss of 
data, the EXC program normally stops all elements in the 
various subsystems before executing new SATR instruc- 
tions. 


PREFERENTIAL STORAGE AREAS (PSAs) 
e@ Unique PSAs available to each processor. 

e MACH contains PSA for IOCE processor. 
e Each PSA contains 4,096 bytes. 


e PSA assignment is under both program and hardware 
control. 


In a system that contains only one processor, all of the 
essential control and status information is stored in fixed 
low-order addresses of the attached storage. This vital 
information consists of three doublewords for IPL, old and 
new PSWs for machine interrupts, CAW and CSW words, 
timer, and the diagnostic logout area. The low-order 
portion of storage where this information is stored can be 
thought of asa preferential storage area (PSA). 

In a multiprocessing system, each processor must have 
its own unique PSA. Separate PSAs allow each processor 
(CE) to service I/O operations and interrupts without 
interference from other processors within the system. 
MACH storage contains a PSA area for controlling IOCE- 
processor operations. Both PSAs (in a CE or IOCE) serve 
the same purpose, but the functions of the PSA in MACH 
are somewhat limited with respect to those in a CE. 

Design of the 9020 system is such that each 
524,288-byte SE can be divided into 128 blocks of 
4096-byte PSAs (Figure 5-18). The addressing scheme 
(Figure 5-19) is such that the 12 low-order bits specify a 
4096 block of byte addresses equal to one PSA. The 12 
high-order bits can be logically divided into two sections: 
seven bits (13—19) can indicate any one of one hundred 
twenty-eight 4096-byte blocks (PSAs) within one SE, and 
four bits (9—12) can indicate a specific SE within which the 
PSA is located. Bit 8 is not used for addressing but is 


524,287 
=" 
520, 192 
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Figure 5-18. Relative PSA Assignments within an SE 
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Figure 5-19. 9020 Addressing 


checked to ensure that it is zero. An invalid address check 
occurs if bit 8 is set to one. The combined high-order bits 
specify a preferential storage base address (PSBA) to be 
used during fixed-address machine operations. 


A special preferential storage base address register 
(PSBAR) in the CE can be loaded by a load PSBA (LPSB) 
instruction to specify the particular PSA currently used by 
that CE. 


Because of the fail-safe/fail-soft requirements of the 
9020 system, each CE must be able to relocate its PSA to 
secondary areas when the primary area (SE) becomes 
unavailable. This PSA relocation must be under program or 
automatic control; manual intervention is too slow and is 
subject to human error. 


PSA relocation can actually occur in two ways: first, 
under program control by the LPSB instruction and, 
second, automatically by hardware. These programming 
and automatic hardware facilities allow the 9020 system to 
dynamically adjust itself to changes in available storage due 
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to storage failures (automatic relocation) or to changes in 
the actual load or load requirements (program-controlled 
PSA relocation). 

Refer to Chapter 8, under “CE Handling of SE Response 
Errors’, for further information about automatic PSBAR 
stepping in response to a malfunction. 


Preferential Storage Base Address Register (PSBAR) 


e Two registers: logical PSBAR and physical PSBAR. 
e Loaded and stored under program control. 
e Effective when the 12 high-order address bits = 0. 


e Used primarily for preferential storage references; not 
normally used for data references. 


The purpose of the PSBAR is to reference the proper PSA 
currently assigned and associated with the CE or IOCE 
program. PSA references to old and new PSWs, channel 
CAWs and CSWs, and logout areas always refer to low-order 
fixed addresses starting at location zero. This low-order 
addressing is automatically recognized by hardware circuits 
whenever the 12 high-order bits are 0’s. When high-order 0’s 
are detected, the 11-bit PSBAR value is ORed with these 
0’s to produce a reference to the proper PSA area. For 
example, if an interrupt routine addressed the I/O old PSW 
at location 38 (hex), the CE would attempt to address 
location 0000 0000 0000 0000 0011 1000. 

If this CE’s assigned PSA is located in the second 4K 
block of storage (bytes 4,096-8,191) in physical SE 2, the 
PSBAR value and resultant ORing would be: 


0000 0000 0000 0000 0011 1000 (Fixed address) 


001 0000 000) 


(11-bit PSBA OR'ing) 


0001 0000 0001 0000 0011 1000 (Fixed address in PSA | of SE 2) 


All interrupts and logouts are affected by PSBAR. 
Program-generated addresses are also affected when the 12 
high-order address bits are all 0’s. 


The ORing of PSBAR is completely automatic. Note 
that the original address contained in the instruction is not 
changed. Actually, PSBAR is composed of both a logical 
and a physical PSBAR which are related to each other 
through the ATR, which was discussed in a previous 
section. 
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Logical PSBAR 

e An 11-position register in each CE. 

e Loaded by the LPSB instruction. 

e Stored by the SPSB instruction. 

e Contains a four-position counter for SE selection. 


This 11-position register is loaded by the LPSB instruction 
and retains this initial setting until it is reloaded by a new 
LPSB instruction or is changed by an external start. 
Positions of the register are labeled to match their 
corresponding address positions (Figure 5-20). The 11 
positions can be divided into two logical sections: positions 
13—19, which can select a particular PSA within a storage 
element, and positions 9—12, which select a particular SE. 


Selection 
of a Selection of a 
particular PSA within an SE 
SE 
9 12 13 19 


Figure 5-20. Logical PSBAR Format 


As is explained subsequently, positions 9-12 of logical 
PSBAR enter a four position binary counter that is used to 
automatically select new SEs under certain malfunction 
conditions. The contents of this logical register (bits 
13—19) and the present value in the four position counter 
(bits 9-12) can be obtained by the program by means of 
the Store PSBA instruction (SPSB). See “Store PSBA 
Instruction (SPSB)”’. 


Physical PSBAR 

e A four-position register in each CE. 

e Set from logical PSBAR after translation by the ATR. 

e Stored by the SPSB instruction. 

Physical PSBAR specifies the physical, or actual, SE to be 
used in a preferential storage reference. It is a four-position 


register set to one of the identification character (identi- 
fiers) found in the SE portion of ATR. The ATR slot from 


which the identifier is taken is determined by decoding bits 
9-12 of logical PSBAR. This decoding is shown in Figure 
5-21. Since an address of all zeros would fall in the first 
slot, all zeros in logical PSBAR decode slot 1. Thus, the slot 
decoded is always one more than the binary value in logical 
PSBAR (9-12) within the range of valid addresses. 

Physical PSBAR is set during execution of the Load 
PSBA (LPSB) instruction. It is also set when, because of a 
malfunction, the PSBAR counter has stepped to the 
alternate PSA SE. When the alternate SE is located and 
found to be configured, the identifier from the new ATR 
slot is set into physical PSBAR. Bits 9—12 of logical 
PSBAR are also updated during this stepping, as is discussed 
under “PSBAR Counter”. 


9 12 13 


ATR Slot Decoder 


Logical PSBAR 
Bits 9-12 mites 
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Select signals 
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Figure 5-21. Setting of Physical PSBAR from Logical PSBAR 


re ATR slot into physical PSBAR 


Because the contents of physical PSBAR are always 
available in translated form, references to the PSA are made 
by using bits 9-12 directly from physical PSBAR rather 
than by using the contents of the ATR slot, as is done 
during a non-PSA storage access. 


Figure 5-22 shows how the effective address for a PSA 
access is developed. Note that the address retains the 
original low-order bits but obtains the high-order bits from 
logical and physical PSBAR; bits 13—19 come from logical 
PSBAR and bits 9-12 come from physical PSBAR. 

The value in physical PSBAR may be obtained by the 
program via the Store PSBA (SPSB) instruction. See “‘Store 
PSBA (SPSB)”. 


Shaded area represents 
invalid slots for PSA 
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8 PSA Reference - Logical Address 
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Note: Physical and logical PSBAR are set by 


LPSB instruction. 


Figure 5-22. Effective PSA Address Generation 


PSBAR Counter 


e A four-position counter. 
-@ Set from logical PSBAR (9-12). 


e Automatically steps to new storage element (PSA) for 
certain PSA storage failures. 


Positions 9-12 of the logical PSBAR are set into a 
four-position binary counter (Figure 5-23). By means of 
this counter, each CE can automatically reference an 
alternate PSBA whenever the inhibit logout stop (ILOS) bit 
is off in the CCR and a failure occurs on an access to the SE 
containing the primary PSA. The alternate PSBA is ob- 
tained by incrementing the counter (adding successive 
524,288-byte increments to the logical PSBA) until the 
next configured SE is reached. In Figure 5-23, the value of 
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zero is shown in logical PSBAR (9-12). This decodes as 
ATR slot 1. 

As the counter is stepped, each higher logical position of 
the ATR is tested for an identifier character of a configured 
SE. When the first configured SE is found in the ATR, 
physical PSBAR is updated with the new identifier char- 
acter. PSA references are now made to this new storage 
element where the EXC program has already set up proper 
PSWs, CAWs, CSWs, etc., to handle the situation. 

If the counter reaches the highest SE in the system, 
incrementing continues past numbers reserved for any 
uninstalled SEs and past the DEs until a wraparound effect 
is achieved, stepping to the lowest SE. The ATR is again 
tested from left to right until the alternate SE is found. 

Note that while stepping continues past the DEs no 
configured DE can stop it because the line ‘frame X valid’ 
(where X = 6, 7, 8, 9, and 10) is tied to ground in a 9020E 
system. A ‘frame X valid’ line is required to stop the ATR 
search. 


ATR 
Slot 
Decode 


Incrementer 
for PSBAR 


SISeRING ATR Slot 


Gating 


PSBAR 


Counter 


PSBAR Step Gating 


Figure 5-23. PSBAR Counter 


After stepping to an alternate storage element, the 
PSBAR counter is inhibited from further stepping until a 
load PSBA instruction is issued by the CE. This instruction 
(or an external start) resets the counter’s stepping abilities 
and allows normal incrementing, as described previously. 

If, after locating an alternate SE through PSBAR 
stepping, errors are still obtained in accessing the PSA, the 
CE hardstops and issues an ‘element check’ (ELC) signal. 
Until a Load PSBA instruction is issued, the CE retains its 
current logical and physical PSBAR and PSBAR counter 
values, and all further incrementing is inhibited. A full 
analysis of all three can be obtained by a diagnostic logout. 

If no configured alternate SE is found during PSBAR 
stepping, stepping stops when logical PSBAR contains 9 


(1001 hex) the second time. Referring to Figure 5-21, it is 
seen that a 9 in logical PSBAR decodes ATR slot 10. The 
PSBAR counter would be set to 0000 at this time. When 
stepping stops with no alternate SE found to be configured 
the CE hardstops and issues ELC. 


Load PSBA Instruction (LPSB) 


e SI format. 
e@ Valid only in supervisor state and 9020 mode. 


e Loads both the logical and physical PSBAR. 
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The Load PSBA instruction is in SI format; the I2 field 
(positions 8—15) is ignored. Bits positions 8—19 of the 
word fetched by the LPSB instruction represent the 12 
high-order bits of the PSBA. 

The LPSB instruction can be executed only in super- 
visory state and 9020 mode, and the effective address of 
the word fetched by the instruction must specify word 
boundary addressing. A violation of any of these conditions 
causes a specification check and suppression of the opera- 
tion. 

A test is made to determine whether bit positions 8—19 
specify a location within an SE configured to communicate 
with the CE executing the instruction. DE addresses are not 
acceptable. A prerequisite to this test is the presence of the 
SE’s identifier character in the ATR. This identifier must be 
in the ATR location corresponding to the logical address 
indicated by bits 8-19. If this ATR position does not 
contain a valid identifier, or if that SE is not configured, 
the LPSB instruction is terminated with a specification type 
of program interrupt. 

If the above test is successful, positions 8—19 are loaded 
into the logical PSBAR. The physical PSBAR is also set 
with the identifier character located in the ATR position 
indicated by 9—12 of the logical PSBAR (Figure 5-21). 

The content of physical PSBAR is retained until it is 
replaced by another LPSB instruction, an IPL, a PSW 
restart, an external start, or a condition which causes 
PSBAR stepping. 


Store PSBA Instruction (SPSB) 

e SI format. 

e Valid only in supervisory state and 9020 mode. 
e Stores both the logical and physical PSBA. 


The store PSBA instruction is in SI format; the 12 field 
(positions 8—15) is ignored. The instruction can be exe- 
cuted only in supervisory state and 9020 mode, and the 
effective address of the storage reference must specify word 
boundary addressing. A violation of any of these conditions 
causes a specification check and suppression of the opera- 
tion. 

The current logical and physical PSBAs are stored by the 
PSBA instruction. The logical PSBA is stored in positions 
8-19; the physical PSBA is stored in positions 28—31; 
positions 0—7 and 20—27 are set to 0’s (Figure 5-24). 


Fi Physical 
00000000 Logical PSBAR 00000000 PSBAR 


ti) 76 v 20 27 26 a 


Figure 5-24. Storing of Logical and Physical PSBAR 
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Positions 9-12 of the logical PSBAR represent the 
current value of the PSBAR counter (including any 
stepping). The original value of 9—12 prior to stepping can 
be determined by examination of the original LPSB 
instruction. 


Operational Characteristics of PSBAR 


Whenever the high-order 12 bits of a storage address are all 
zero, PSBAR is used to access storage. The low-order 12 
bits which remain are sufficient to code addresses up to 
4096. Thus, PSBAR establishes a block of 4096 bytes 
which may be anywhere in storage on 4096-byte bound- 
aries. Since the normal contents of a PSA (PSWs, CAW, 
CSW, timer, and logout area) do not require 4096 bytes of 
storage, the operational programmer may use the remainder 
in any fashion. The program will always be able to locate 
information placed there since PSBAR will automatically 
be used when the high-order 12 bits of the address are zero. 
Only the relative location in the PSA is required. . 

Each operational CE in the system should have a unique 
PSA at all times. For maximum safety in the event of a 
storage malfunction, the PSA for each CE should be in a 
different SE. The automatic PSBAR stepping capability of 
the 9020 system imposes some restrictions on certain 
blocks of storage. Of course, a primary PSA area must be 
established in some 4096-byte block of storage. An 
alternate PSA area must also be established in the next 
higher configured SE. (In this context, higher means further 
to the right in the ATR; it does not refer to SE identifiers.) 
The alternate PSA must reside in the same relative 
4096-byte block as does the primary PSA, as the PSBAR 
stepping capability steps in 524,288-byte (1 SE) incre- 
ments. Thus, if the primary PSA is located in the highest 
4096-byte block in its SE, the alternate PSA must occupy 
the highest 4096-byte block in its SE. 

A further consideration, in the multiprocessing environ- 
ment, is the necessity of placing a PSA in a location other 
than the lowest block of available storage. If this is not 
done, it may become impossible for one processor to access 
another processor’s PSA, thus precluding this useful means 
of communication between CEs. The reason for this is that 
if one CE has its PSA in the lowest block of available 
storage and another CE attempts to access that PSA, the 
second CE will, instead, access its own PSA. This is because 
the low address causes the second CE’s zero-detect circuitry 
to force a PSBAR access, thus relocating the actual access 
to the location specified by PSBAR. 

An additional consideration in establishing primary and 
secondary PSAs is the fact that each CE must have a unique 
PSA even after switching to alternate PSAs. For this reason, 
no primary or alternate PSA can occupy the same storage 
segment as any other primary or alternate PSA. To 


maintain this condition when an additional SE becomes 
available, or when an SE is lost to the system, may 
necessitate rearranging primary and alternate PSA relation- 
ships. 


PSA Example No. 1 


Initially, a CE is configured to communicate with SE 1 and 
SE 3 [Figure 5-25(a)]. The primary PSA is in SE 1; the 
alternate PSA is in SE 3. Any stepping of the PSBAR 
counter will pass over SE 2 and find SE 3 as the next 
configured (alternate) SE in the system. 

At some point in the operation, SE 2 is added to 
(configured into) the system. Stepping of the PSBAR 


No. 1 
Computing Element 


counter under these conditions finds SE 2 as the next 
configured SE. Two courses of action are possible: the 
alternate PSA can be relocated into SE 2 or the ATR can be 
set up to make SE 3 the higher (alternate) SE. In Figure 
5-25(b), the CCR and ATR settings are such that any 
references to SE 2 are actually sent to SE 3. Thus, the 
secondary PSA areas need not be relocated in the next 
system. 

The change in ATR must be performed quickly after 
reconfiguration because the system is endangered. The 
system elements are normally placed in a wait state during a 
change in configuration and address translation. If the 
elements were not stopped, data transfers could be split 
between two SEs, and PSA references could be directed to 
an SE where no PSA information exists. 


Primary PSA 


(a) Initial Configuration 
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Figure 5-25. PSA Example No. 1 
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PSA Example No. 2 


Initially, a CE is configured to SEs 1, 2, and 3 [Figure 
5-26(a)]. The primary PSA is in SE 2; the alternate PSA is 
in SE 3. Any stepping of the PSBAR counter to an 
alternate PSA immediately finds SE 3 configured to the 
system. 

At some point in the operation, SE 3 is removed from 
(reconfigured out of) the system. In this case, the alternate 
PSA that was in SE 3 had to be relocated into SE 1. By 
changing the ATR, references to logical SE 3 can be 
directed to physical SE 1. Any stepping of the PSBAR 
counter from SE 2 sets the physical PSBAR to SE 1 where 
the alternate PSA is now located. Any normal data 
references to logical SE 3 will also be directed to SE 1 
[Figure 5-26(b)]. 

The PSA relocation must be seroriied as soon as 
possible (preferably before the unavailability of SE 3) 
because the system is without an alternate PSA during this 


time. If PSBAR were incremented during this interval, 
non-PSA information contained in SE 1 would be inter- 
preted as control information. Note also in Figure 5-26(b) 
that the absence of a configured SE in ATR slot 1 causes 
the lowest 524,288-byte block of address to be interpreted 
as invalid. This might render this configuration less de- 
sirable than the original one, depending on the program. 

After PSBAR steps automatically to the alternate PSA, 
the “PSA alternate’ latch is set, and further stepping is 
inhibited until a new alternate PSA can be set up in the 
appropriate storage element. This latch is reset when a Load 
PSBA instruction is issued. 

Because PSBAR can be loaded by the program, it is 
assumed that appropriate primary and alternate PSAs will 
have already been set up any time the PSBAR setting is 
changed. Further, the alternate PSA should be recognizable 
to the program as an alternate PSA, via appropriate coding, 
so that action can be initiated to deal with the cause of the 
PSBAR stepping. 


Alternate PSA 
Primary PSA 


(a) Initial Configuration 
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Figure 5-26. PSA Example No. 2 
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IOCE PSBAR 


e PSBAR isa 12-bit register in IOCE. 
e IOCE cannot step PSBAR. 


e Two types of PSA accesses. 


The PSBAR in the 6IOCE is a 12-bit register (bit 8 is 
included). In normal operation, PSBAR is set whenever 
updated PSBAR data is sent to the IOCE from the CE for 
1/O instructions, IPL, FLT load, and ‘permit I/O’ or ‘MC 
interrupt’. PSBAR contents are gated from IOCE to SE 
during an IOCE PSA access. PSBAR always specifies the 
physical storage to be accessed; hence, it is not translated in 


the ATR. This is the same as CE operation. No provision is 
made for PSBAR stepping in the IOCE, however. The 
PSBAR obtains its setting from the CE and retains it until it 
is updated by new information on the CE-to-IOCE control 
bus. 

Two types of PSA accesses are processed in the IOCE. 
The first includes all PSA operations, except IPL and FLT 
load, and confines the accesses to the PSA in the specified 
SE. High-order address bits (9—19) are specified by PSBAR. 
Bits 20—31 are passed through the normal path from ‘adder 
out bus’ latches to the storage address register (SAR). The 
second type of PSA access, found in IPL and FLT load, 
allows the IOCE to access any address within the SE 
specified by PSBAR. Bits 9—12 are specified by PSBAR; 
bits 13—31 are passed through the normal AOB-to-SAR 
path. 
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e Re-entrant coding. 
e Special multiprocessing instructions. 
e Special hardware for multiprocessing operation. 


The 9020E display channel processor is a true multisystem 
organization in that it consists of two or more processing 
units which intercommunicate without manual interven- 
tion. It is capable of operating in a multiprogramming or a 
multiprocessing mode. In a multiprogramming mode, two 
or more programs are handled by running portions of each 
in an interleaved fashion. In a multiprocessing mode, more 
than one processor is available so that two or more 
programs may be running simultaneously or, conceivably, 
two processors could be simultaneously processing data 
using the same instruction coding from the same storage 
location. Because of this latter possibility, much of the 
coding in the EXC program and the diagnostic monitors is 
“re-entrant”’. Re-entrant means that the coding may be 
accessed by two or more processors simultaneously without 
the actions of one processor interfering with the actions of 
the other. For example, in this type of coding, execution of 
the instructions must not alter the instructions in storage 
for this would interfere with execution by other processors. 


This type of coding is not possible in all cases, however. 
Further, data being accessed by one processor must 
somehow be protected from the actions of other proces- 
sors. Thus, in a multiprocessing environment, certain 
facilities must be provided to enable the operations of the 
processors to proceed without interfering with each other 
and in such a manner that each can bear its share of the 
processing load. 

The 9020 system is a dynamically-reconfigurable multi- 
system that is capable of adjusting to variations in workload 
and of accommodating single element malfunctions without 
manual intervention. This capability is largely dependent on 
the EXC program, and on a number of features which make 
an integrated multiprocessing operation possible. These are: 
1. Special multiprocessing instructions. 

2. An elaborate system of intercommunication among the 
major elements. 

3. An interruption-handling capability. 

4. Special registers and hardware designed for operation in 

a multiprocessing environment. 


CHAPTER 6. MULTISYSTEM OPERATION 


In previous chapters it was shown how the reconfiguration 
capability is implemented and how storage may be assigned 
to different processors. Further, it has been shown that 
storage may be shared by more than one CE or IOCE. This 
chapter discusses the special instructions which make 
multiprocessing possible. The manner in which the shared- 
storage and reconfiguration capability fit into the overall 
multisystem operation is also discussed. The 9020 interrupt 
capability is discussed here because it makes possible 
intercommunication between programs, coordination of 
independent but concurrent system functions, and overall 
system monitoring of errors and abnormal conditions. This 
latter aspect of interruptions is enlarged upon in Chapters 7 
and 8. 

Two multiprocessing instructions, Write Direct (WRD) 
and Read Direct (RDD), are discussed first. These instruc- 
tions and the associated hardware fall under the heading of 
“direct control”, a facility which permits direct communi- 
cation between processors. 


DIRECT CONTROL 


e@ CE direct control uses WRD and RDD instructions. 
e IOCE-processor direct control uses the WRD instruction. 


e External signals are from CE-CE, CE-IOCE, and IOCE- 
CE. 


CE direct control provides Write Direct (WRD) and Read 
Direct (RDD) instructions for communication by CEs. 
JOCE-processor direct control uses the WRD instruction to 
communicate from an IOCE to a CE. 

Associated with direct control instructions are interface 
lines on which signals are made available. A signal from one 
CE may be connected to another CE or IOCE to cause an 
external interruption or other automatic operation. The 
direct control feature also provides static signals in the form 
of a communication byte that can be sent between two 
CEs. 

CE direct control instructions may be validly executed 
only when the computing element is in the supervisor state. 
IOCE-processor direct control instructions can be executed 
in the problem state. 
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CE Write Direct Instruction (WRD) 
e SI format. 
e Eight coded commands. 


The WRD instruction of the 9020 system can issue eight 

commands when executed by a CE: 

1. To communicate between computing elements. 

2. To cause an external start of a CE. 

3. To cause an automatic logout of a CE. 

4. To cause an automatic logout of an IOCE. 

5. To cause another CE to reset and go to the stopped 
state. 

6. To stop an IOCE-processor operation. 

7. To start an IOCE processor after it has been stopped. 

8. To cause an external interrupt of an IOCE processor. 


Figure 6-1 summarizes the use of the I2 field of a CE 
WRD instruction for operations and element selection. 
Only one CE or IOCE may be selected by bits 12—15 of the 
I2 field. Honoring of these commands depends on the 
status of each receiving element. A CE accepts a logout, 
external start, or external stop if the proper SCON bits are 
on in its CCR. Data communication is accepted if the 
proper CE field bits (20—23) are on. An IOCE honors a 
logout only if the corresponding CE communication bit is 
on in its CCR. 


Operation Element Selection 
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Figure 6-1. 12 Field Definition for CE WRD Instruction 


Definition 
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A wraparound feature, intended for maintenance of CEs, 
is also included in the WRD and RDD instructions. A 
computing element can respond to all commands that it 
initiates, provided it is configured to listen to itself. 


Data Communication Command 
e CE-to-CE communication. 

e Selected CE is interrupted. 

e Gated by CE bit in CCR. 


The byte at the location specified by the operand address is 
made available as a set of direct-out static signals which 
remain static until the next WRD instruction is executed. 
An RDD instruction at the receiving CE is used to read the 
data byte. 

This type of communication can be used to direct the 
course of another CE. For example, the byte of informa- 
tion might be a coded representation of a subroutine or 
operation to be performed by the element. 


CE External Start Command 
e Causes receiving CE to start. 
e Only one CE may be selected per WRD. 
e Gated by SCON bit. 
The WRD external start operation can be issued only to one 
CE during each WRD instruction. Multiple bits in the I2 
field (12—15) cause a specification check. 

The external start signal is accepted by the CE only if it 
is SCONed to the sending CE. If properly SCONed, the 
receiving CE obtains a new PSW from location zero of its 


PSA and proceeds to execute the program indicated by the 
PSW address. 


CE Logout Command 

e Causes receiving CE to initiate a logout. 

e Only one CE may be selected per WRD. 

e Gated by SCON bit. 

The WRD CE logout signal can be issued only to one CE 


during each WRD instruction. Multiple bits in the I2 field 
(12-15) cause a specification check. 


The logout signals are accepted by the CE only if it is 
SCONed to the sending CE. If properly SCONed, the 
receiving CE commences logging out into the PSA indicated 
by its own PSBAR. 


IOCE Logout Command 

e Causes receiving IOCE to initiate logout. 
e Only one IOCE can be selected per WRD. 
e Gated by communication bit. 


The WRD IOCE logout signal can be issued only to one 
IOCE during each WRD instruction. Multiple bits in the I2 
field cause a specification check. 

The logout signal is accepted by the IOCE only if it is 
SCONed to the sending CE. If properly SCONed, the 
receiving IOCE commences logging out into the PSA 
indicated by the sending CE. 

Each of the preceding CE and IOCE logouts would 
probably be issued because of an element-failure indication 
(ie., element check). After the logout is completed, the 
controlling CE can analyze the data and determine the 
course of action necessary from that point. 


CE External Stop Command 


e Causes the selected CE to reset and go to the stopped 
state. 


The CE External Stop command permits a CE to raise the 
“external stop” line to a selected CE. At the end of the 
current instruction, the selected CE changes from the 
operating, wait, or check-stop state to the stopped state. 
The selected CE is reset, and all pending interruptions are 
eliminated. Stopped state is indicated by the manual light 
on the system console and CE control panel. 

The receiving CE must have the issuing CE’s SCON bit 
on, and it must be the only CE selected. 


IOCE-Processor Stop Command 


e Causes the selected IOCE processor to go to the stopped 
state. 


The IOCE-Processor Stop command permits a CE to raise 
the ‘IOCE-processor stop’ line to a selected IOCE. At the 
end of the current IOCE instruction, the IOCE processor 
changes from the running or wait state to the stopped state. 
Interruptions remain pending, but the timer is not updated 
in the stopped state. 


For the Stop command to be effective, the IOCE 
processor must have its communication bit for the request- 
ing CE set in the configuration control register of the IOCE. 


IOCE-Processor Start Command 


e Causes the selected IOCE processor to leave the stopped 
state. 


The IOCE-Processor Start command permits a CE to raise 
the ‘IOCE-processor start’ line to a selected IOCE. The 
IOCE processor immediately changes from the stopped 
state either to the running or the wait state, depending on 
the setting of PSW bit 14 in the IOCE processor. If bit 14 is 
off, an instruction is fetched from the location specified by 
TAR. 

For the Start command to be effective, the IOCE 
processor must have its communication bit for the reques- 
ting CE set in the configuration control register of the 
IOCE. 


IOCE-Processor Interrupt Command 


e Causes an external-interruption request to be presented 
to a selected IOCE processor. 


The IOCE-Processor Interrupt command permits a CE to 
raise the ‘IOCE-processor interrupt’ line to a selected IOCE. 
The interruption is taken if PSW bit 7 in the IOCE 
processor is a one and the processor is in the running or 
wait state; otherwise, the interrupt remains pending. 

For this command to be effective, the IOCE processor 
must have its communication bit for the requesting CE set 
in the configuration control register of the IOCE. 


Read Direct Instruction (RDD) 

e SI format. 

e Reads data sent by WRD instruction. 
e Interrupts selected CE. 


The RDD instruction reads the data transmitted by means 
of a WRD instruction during CE-to-CE communication. A 
direct-in data byte is placed in the location specified by the 
RDD operand address. Only one byte of data can be read in 
on each RDD instruction. 

The RDD instruction accepts the data byte if the hold-in 
line is inactive, indicating that the byte is static. If the 
hold-in line is active for more than 4 usec, the RDD 
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instruction terminates with a machine-check interrupt. Bit 
29 of the PSW interrupt condition code is set to identify 
the interruption. No logout occurs. 

As an indication that the data byte has been accepted, 
the RDD instruction causes an external interrupt at the 
selected CE by setting a corresponding bit in its external- 
interrupt register. 


IOCE-Processor Write Direct Instruction (WRD) 


e SI format. 
e One command: CE external interrupt. 
e Bits 8—11: 1000. 


The IOCE-Processor Write Direct instruction permits the 
IOCE processor to request an external interrupt in the 
controlling CE by raising a ‘processor interruption’ line to 
the CE. The IOCE that requests the interrupt is identified 
in a processor interruption register (PIR) in the CE. 

This command is effective only if the IOCE has its 
communication bit for the controlling CE set in the 
configuration control register of the IOCE. Bit 7 of the 
PSW in the controlling CE must be on. 


Direct Control Example 


Figure 6-2 shows simplified representations of the CCRs of 
the CEs and IOCEs in a typical system. These are shown as 
they might be configured into three subsystems: the ATC 
subsystem in state three, a secondary subsystem in state 
two, and a maintenance subsystem in state zero. 

In this example, CE 1 is the only computing element 
that can reconfigure the system; it is the only one in state 
three. CE 1 also executes the EXC program which is 
engaged both in the active ATC problem and in monitoring 
the secondary and maintenance subsystems. 

Even though this example may not be a completely 
practical one, the settings of the various CCRs will illustrate 
important points of the direct control feature. 


Data Communication 


All three CEs can initiate a WRD or RDD operation if they 
are in the supervisory state. In Figure 6-2, for example, CE 
1 may initiate a write direct data communication operation 
to CEs 2 and 3. CE 2 has the CE 1 bit on in its CCR. Thus, 
CE 2 will have its external interrupt register set and, if PSW 
mask bit 7 is on, will experience an external interrupt at the 
end of its current instruction. If the mask bit is off, the 
interrupt is retained and delayed until bit 7 is set on by the 
monitor program. CE 2, in turn, may issue an RDD 
instruction to CE 1. CE 1 acknowledges this RDD because 
the CE 2 bit is on in its CCR. Thus, CEs 1 and 2 can 
effectively communicate with each other. 
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CE 1, issuing a data communication to CE 3, is 
completely ignored by the latter. CE 3 has been configured 
not to listen to CE 1 in this respect and will not have the 
external register set with any indication. Similarly, CE 1 
will completely ignore any write-direct or read-direct data 
communication operations from CE 3. CEs 1 and 3, in this 
case, have no data-ccommunication abilities with each other. 

Any such operations directed to an IOCE will be 
ineffective; data byte signals are not available at the inputs 
of the IOCEs. 


CE External Start 


CE 1 can initiate an external start to CEs 2 and 3. Both of 
these CEs are SCONed to listed to CE 1. 

An external start to CE 2 is the more practical case. 
State-two operations are assumed to be under tight monitor 
control. Therefore, it is likely that CE 1 could load SE 3 
with the program for CE 2 to execute, load a proper PSW 
into location 00000 of SE 3, and issue an external start. At 
this point, CE 2 would load the PSW into its internal 
registers and begin executing the program indicated by the 
instruction address in PSW (40—63). 

An external start could be issued by CE 2 and CE 1 if in 
supervisor state, but, because CE 1 is the controlling CE, it 
is not SCONed to accept an external start operation from a 
lower CE. By being able to ignore such operations as SCON 
and external start, for example, the EXC program is assured 
full control of the system at all times. Thus, CE | can force 
an external start on CE 2 and CE 3, but not vice versa. 


CE Logout 


The CE logout conditions and restrictions are similar to 
those of the external start operation discussed in the 
preceding section; CE 1 can cause a logout in CE 2 and CE 
3, but not vice versa. Because the PSA of CE 2 is most 
likely to be in the first SE indicated in CE 2’s CCR, the 
logout will place the logged-out data in SE 3. 

The logout signal to CE 3 logs the data into SE S. In this 
case, logout is dependent on the setting of the test switch 
on CE 3. The logout is ignored if the test switch is on in 
state zero. 


IOCE Logout 
e Gated by CCR(20—23) 


In Figure 6-2, each CE can log out the IOCE to which it is 
configured. Each IOCE is configured to listen to only one 
CE. Any other CE attempting to issue an IOCE logout will 
have its operation effectively NOPed. 


No. 1 


Computing Element 


State SCON SE 


Legend: 
@ State Three ATC Subsystem 


® State Two Subsystem 


@ State Zero Maintenance Subsystem 


(OL/L) Uuoronponul 40706 
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Figure 6-2. Direct Control Example 
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In each of the above cases, only one CE is assumed to be 
in state three performing the active ATC operation. In large 
systems and during peak periods of air traffic, two or more 
CEs could be in state three directly concerned with ATC. 
Under these circumstances, the same restrictions prevail. 
However, the EXC program must maintain close control 
over the setting of the communication bits in the CCRs of 
the active CEs. 


INTERRUPTS 

e Five major categories. 

@ Priority-sensitive. 

e@ Maskable by the PSW in CE or IOCE processor. 


Automatic program interruption provides a quick and 
efficient means of alerting the system to a variety of 
conditions. These interrupts can be grouped in five cate- 
gories. 

Machine check 

Program 

Supervisor call 

External 

Input/Output 


Some interrupts can be controlled (masked); others 
cause an unconditional interrupt as soon as the particular 
condition occurs. Masking is accomplished by placing 
specific bits in a PSW (Figure 6-3). For example, a 0 bit in 
the mask position causes the particular interrupt to be 
suppressed (masked off); a 1 bit in the mask position allows 
the interrupt to be recognized (masked on). 

Note that there are two types of PSWs, one in each CE 
and one in each IOCE processor. Their purpose is the same, 
although the functions of the IOCE-processor PSW are 
slightly limited. Interrupts pertaining to the CE are discuss- 
ed first. 

Associated with each of the five types of interrupts are 
“old” and “new” PSWs which are located in permanent 
storage assignments within the particular preferential 
storage area, as shown in Figure 6-4. The location of the 
preferential storage area is determined by the base address 
in each CE. Therefore, different preferential areas can be 
assigned to each CE within the system. All addresses 
generated automatically by the CE are constructed, using 
the current value in the PSBAR. 

The old PSW preserves the essential machine-status 
conditions at the time of the interrupt and provides an 
interrupt code to indicate the cause of the interrupt. Also 
included in the old PSW is an instruction-length code which 
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System Mask Key AMWP System 
Mask 
0 78 


W112 15 16 9 


Interruption Code 
20 uv 


Program 


32:33 3435 36 9 


Instruction Address 
40 ; 60 


SYSTEM MASK 


0 Multiplexer Channel 0 
] Selector Channel 1 
2 Selector Channel 2 
3 Selector Channel 3 
4 Multiplexer Channel 4 
5 Selector Channel 5 
6 Selector Channel 6 


7 External (Timer, Interrupt Switch, External Signals) 
16 Selector Channel 7 
17 Multiplexer Channel 8 
18 Selector Channel 2 
19 Selector Channel A 
AMWP FIELD 


13 Machine Check Mask 


PROGRAM MASK 


36 Fixed-Point Overflow 
37 Decimal Overflow 

38 Exponent Underflow 
39 Significance 


Figure 6-3. CE Program Status Word Mask Bits 


Doubleword | Initial Program Loading PSW 
Doubleword | Initial Program Loading CCW1 
Doubleword Initial Program Loading CCW2 
Doubleword | External Old PSW 
Doubleword | Supervisor Call Old PSW 
Doubleword | Program Old PSW 

Doubleword | Machine Check Old PSW 
Doubleword | Input/Output Old PSW 


Doubl eword Channel Status Word 
Word Channel Address Word 
Word Unused 


Word Timer 

Word Unused 

Doub! eword External New PSW 

Doubleword | Supervisor Call New PSW 

Doubleword | Program New PSW 

Doubleword | Machine Check New PSW 

Doubleword | Input/Output New PSW 
Diagnostic Logout Area 


Figure 6-4. Permanent Preferential Storage Assignments 


indicates the length of the instruction executed just prior to 
the interrupt. A list of the various interrupts and their 
corresponding interrupt codes is shown in Figure 6-5. 

The new PSW establishes the new machine modes, states, 
masking, and instruction addressing necessary to properly 
proceed into the particular interrupt routine. 

During the execution of an instruction, several interrupt 
requests may occur simultaneously; they are honored 
according to the following priority: 

1. Machine check 

2. Program or supervisor call 
3. External 

4. Input/Output 


Program and supervisor call interruptions have the same 
priority because they are mutually exclusive; ie., both 
cannot occur at the same time. 

With the exception of the Delay instruction, an inter- 
ruption occurs when the preceding instruction is finished 
and the next instruction is not yet started. The manner in 
which the preceding instruction is finished may be in- 
fluenced by the cause of the interruption. Tne instruction 
may have been completed, terminated, or suppressed. 


Machine Check Interrupt 

e CE machine-check interrupts. 

e IOCE machine-check interrupts. 
e@ Maskable by PSW (13). 


A machine-check interrupt can occur as a result of machine 
checks from within both the CE and configured IOCE and 
assumes priority over the other four categories of interrupt. 
The machine-check interrupt is maskable by position 13 of 
the current PSW. 


CE Machine Check Interrupt 
e CE malfunction. 

e Read-direct timeout. 

e Maskable by PSW (13). 


A machine check in the CE can result from many internal 
sources, such as serial or parallel adder half-sum, full-sum, 
and carry errors and parity errors at the various byte 
counters and registers. When this type of error occurs, the 
present instruction is terminated and an ‘element check’ 
(ELC) pulse is unconditionally sent to all other CEs in the 
system. 


As a result of the interrupt, the state of the CE is logged 
out into the preferential storage area starting with location 
80 hex and extending through as many words as the CE 
requires. The old PSW is stored in location 30 hex of the 
preferential storage area with an interrupt code of zero. The 
new PSwW is fetched from location 70 hex. Proper execution 
of these steps depends upon the nature of the machine 
check. 

A read direct timeout condition causes a machine-check 
interruption. The instruction is not terminated, and no 
logout occurs when the machine-check interrupt results 
from this condition. The interrupt code is set to four (100) 
to identify the read direct timeout condition as the cause of 
the interrupt [Figure 6-5(a)]. Read direct timeout is the 
result of the direct-in lines being busy for too long a time 
during an RDD instruction. This busy condition is normally 
imposed on the lines when data is being changed by another 
CE executing write direct. However, an excessive delay 
before busy drops results in the timeout condition. 

All machine checks are maskable by position 13 of the 
current PSW. If the machine check mask bit is 0, an 
attempt is made to complete the current instruction and 
proceed with the next sequential instruction. 


IOCE Machine Check Interrupt 
e IOCE malfunction. 

e Interrupt code identification. 
e@ Maskable by PSW (13). 


The IOCE machine-check interrupt requests to the CE are 
maskable by the CE’s current PSW (13). When a machine 
check occurs, the IOCE issues an ELC to all CEs. At the 
same time, the IOCE initiates diagnostic procedures within 
itself and then issues a machine-check interrupt request to 
the configured CE. All instructions, with the exception of 
I/O instructions, are completed before the interrupt request 
is acknowledged. I/O instructions are terminated upon 
receipt of a machine-check request. 


Program Interrupt 
e@ Normal CE program interrupts. 
e IOCE PSA lockout condition. 


e Logout stop condition. 


Partially maskable by PSW (36-39). 
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Interrupt Source Interruption Code Mask Instruction 
Identification PSW Bits 20-31 Bits Execution 


CE Malfunction 00000000 Terminated 
IOCE 1 Malfunction 00000001 Completed 
IOCE 2 Malfunction 00000010 Completed 
IOCE 3 Malfunction 00000011 Completed 
Read Direct Timeout 00000100 ; Completed 


PSW ~ 70 hex; priority 1) 


Operation 00000001 
Privileged Operation 00000010 
Execute 00000011 
Protection 00000100 
Addressing 00000101 
Specification 00000110 
Data 00000111 
Fixed-Point Overflow 00001000 
Fixed-Point Divide 00001001 
Decimal Overflow 00001010 
Decimal Divide 00001011 
Exponent Overflow 00001100 
Exponent Underflow 00001101 
Significance 00001110 
Floating-Point Divide 0000111) 
IOCE 3 PSA Lockout 00010000 
1OCE 2 PSA Lockout 00100000 
IOCE 1 PSA Lockout 01000000 
Logout Stop 10000000 


Suppressed 
Suppressed 
Suppressed 
Suppressed/Terminated 
Suppressed/T erminated 
Suppressed 
Terminated 
Completed 
Suppressed/Completed 
Completed 
Suppressed 
Terminated 
Completed 
Completed 
Suppressed 
Terminated/Completed 
Terminated/Completed 
Terminated/Completed 
Suppressed/Terminated 


WWWWNNYNN WWNN WW WON DW 


NNNN]— —- — 


~ ss SSS SN 


Instruction Bits 0000 rrerrrrr Completed 
(c) Supervisor Call Interrupt (old PSW ~ 20 hex; new PSW - 60 hex; priority 2) 


Completed 
Completed 
Completed 
Completed 
Completed 
Completed 
Completed 
Completed 
Completed 
Completed 


DAR XXXX —_-XXXXXXX | 
PIR (IOCE-Processor) XXX XXXXXX 1x 
CE 4 Write Direct XXXX — XXXX XXX 
CE 3 Write Direct XXX XXX 1XXXX 
Interrupt Switch XXXX xX TXXXXXX 
Timer xxXxXx 1 xxxxxxx 
CE 2 Write Direct xxx] XXxXXXXXX 
CE 2 Read Direct xX 1x  XxxXXXXXX 
CE 1 Write Direct x1xx  XXXXXXXX 
CE 1 Read Direct UXxx  XXXXXXXX 


NON NDNDN NON ON NON 


x «K x KK KK KK XK 


(d) External Interrupt (old PSW - 18 hex; new PSW - 58 hex; priority 3) 


Completed 
Completed 
Completed 
Completed 
Completed 
Completed 
Completed 
Completed 
Completed 
Completed 
Completed 


Multiplexer Channel 0 aaaaaaaa 
Selector Channel 1 aaaaaaaa 
Selector Channel 2 aaaaaaca 
Selector Channel 3 aagaaaaca 
Multiplexer Channel 4 aaaacaaca 
Selector Channel 5 aaaaaaca 
Selector Channel 6 aaaaaaaa 
Selector Channel 7 aaaaaaaa 
Multiplexer Channel 8 aacaaaaa 
Selector Channel 9 aaaaaaaa 
Selector Channel A aaaacaaa 


x xX KX X KX KK KK XK 


(e) Input/Output Interrupt (old PSW - 38 hex; new PSW - 78 hex; priority 4) 


Legend 


Device Address bits 
Bits of Rl and R2 field of Supervisor Call instruction 
Unpredictable 


Figure 6-5. CE Interrupt Actions 
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Program interrupts occur primarily because of an improper 
specification or improper use of instructions or data. These 
interrupts include a logout stop condition from the CE and 
an IOCE PSBAR lockout condition for each of the three 
IOCEs. Specific interrupt code bits in the old PSW define 
the cause of each program interrupt [Figure 6-5(b)]. Note 
that only four of the program interrupts are maskable by 
means of positions 36—39 of the current PSW. 


Supervisor Call Interrupt 
e Not maskable. 


The supervisor call interrupt occurs as a result of executing 
the Supervisor Call (SVC) instruction. The SVC may be 
executed in problem state and, as the name implies, has the 
primary purpose of switching from problem state to 
supervisor state. 

The contents of bit positions 8—15 of the SVC 
instruction become bits 24—31 of the interrupt code of the 
SVC old PSW. Through use of this instruction, a program 
written in problem state can convey a message or request to 
the control program which is written in supervisor state 


[Figure 6-5(c)] . 


External Interrupt 

e Timer interrupt 

e Console interrupt. 

e Direct control interrupt. 
e DAR interrupt. 

e PIR interrupt. 

e Maskable by PSW (7). 


External interrupts, for the most part, originate from 
signals or actions external to the particular CE. These 
sources include interrupts due to the operator’s console 
INTERRUPT pushbutton, direct control operations, and 
abnormal condition signals set into the diagnose accessible 
register (DAR) by other major elements within the system. 
Interrupts which might not actually be considered external 
include the timer interrupts and certain conditions of the 
DAR. At any time in an IOCE-processor operation, the 
IOCE can present an external interrupt to the controlling 
CE. The identification of the interrupting IOCE processor is 
saved in a processor interrupt register (PIR) and an external 
interrupt is initiated. 


External interrupts are under control of PSW (7). An 
external-interrupt request may occur at any time, and 
several different requests may occur simultaneously. The 
requests are preserved until they are honored by the CE. 
When the external interrupt occurs, all pending requests are 
presented simultaneously and identified by unique code 
bits in the old PSW [Figure 6-5(d)]. 


Timer Interrupt 
e Timer located in location 50 hex of PSBA. 


e Maskable by PSW (7). 


The timer occupies a 32-bit word at location 50 hex of the 
CE’s preferential storage area. Its setting may be changed at 
any time by storing a new value in location 50 hex. In this 
manner, the timer can serve as a real-time clock and an 
interval timer. 

The timer contents are reduced by 1 in positions 21 and 
23 every 1/60-second (line frequency). The interruption is 
initiated as the count proceeds from a positive to a negative 
number and is identified by position 24 of the interrupt 
code in the old PSW [Figure 6-5(d)] . 

The timer is not updated when the CE is in the stopped 
state or when is in state zero with the disable interval timer 
switch on. 


Console Interrupt 
@ Operator intervention at the CE. 
e Can also be initiated from the configuration console. 


e Maskable by PSW (7). 


A console interrupt provides a means of operator interven- 
tion with the system. These interrupts are maskable by 
position 7 of the current PSW and are identified by position 
25 of the interrupt code in the old PSW [Figure 6-5(d)]. 

The CE INTERRUPT pushbutton is further conditioned 
by the CE SYSTEM INTERLOCK switch and the CE state 
bits. When the CE is in state two or three, the SYSTEM 
INTERLOCK switch must also be used in conjunction with 
the INTERRUPT pushbutton. In states zero and one, 
however, the pushbutton is active without the need of the 
INTERLOCK switch. An interrupt can also be initiated 
from the configuration console (CC) provided the CE is not 
in state zero with the test switch on. 
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The IOCE also has an INTERRUPT pushbutton that is 
maskable by its current PSW. The pushbutton is only usable 
in the IOCE when the IOCE is in state one and diagnostic 
mode or when in state zero. 


Direct Control Interrupts 

e Read direct and write direct. 

e Under control of CE’s CCR (20-23) and CCR (29-31). 
e Maskable by PSW (7). 


Each CE has the ability to acknowledge both read-direct 
and write-direct interrupt signals from other CEs within the 
system. Interrupt code bits 20—23 and 26—29 specifically 
indicate the read-direct and write-direct signals from CEs 
1—4, respectively [Figure 6-5(d)]. A CE can also acknowl- 
edge a write-direct interrupt signal from an IOCE processor. 
Bit 28, 29, or 30 in the processor interruption register 
(PIR) identifies the source of the interrupt as IOCE 
processor 1, 2, or 3. 

Direct-control interrupts are not accepted by the receiv- 
ing CE if its CCR is not configured to listen to the sending 
CE or IOCE. If configured, the interrupt signal is accepted 
and retained until the interrupt occurs. 


IOCE | IOCE | IOCE SE ELC DE ELC 

1 2 3 

a| bl} al bla} b]1/2)/3]44;5 16 47/18 ]9 410 
2 6 7 8 9 UW N 2 13 4 15 


Note: Abnormal conditions from the [OCE's are encoded as follows: 


Condition 


Normal Condition 
On Battery Signal (OBS) 
Out of Tolerance Check (OTC) 


a 
0 
0 
] 

] Element Check (ELC) 


—-o-090 |[o 


(a) DAR Format 


wi 
Y 
Q 
2 
2 


=| © IOCE 


(b) DAR Mask Register (DARM) 


Figure 6-6. Abnormal Condition Monitoring and Masking 
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Abnormal Condition Signals 

e Signals from major system elements. 

e Set into DAR register. 

e@ Individually maskable by the select register. 
e Collectively maskable by PSW (7). 


The external-interrupt capabilities of the CE are expanded 
by means of a 32-bit DAR to continually monitor abnormal 
condition signals from all CEs (including itself), SEs, 
IOCEs, RCUs, and TCUs. This is discussed briefly here and 
more fully in Chapter 7. 

Abnormal signals include element checks (ELC), out-of- 
tolerance checks (OTC), and on battery signal (OBS). Each 
system element has a corresponding position (or positions) 
in the DAR which continually monitors signals from the 
various elements [Figure 6-6(a)] . 

With the exception of ELCs from other CEs, each 
position of the DAR is maskable by a corresponding 
position in the receiving CE’s DAR mask register [Figure 
6-6(b)] . 

Each IOCE is assigned two DAR bits to indicate: 

(0, 0) Normal operation 

(0, 1) On battery signal (OBS) 

(1, 0) Out-of-tolerance check (OTC) 

(1, 1) Element check (ELC) 


Ww 20 2) 220 «23 24°25 2% 27 26 2 Ww v 


The CE also has two bits to monitor its own OTC and OBS 
signals. The SEs, RCUs, and TCUs are each assigned one 
position to monitor ELC conditions, the specific meaning 
of which varies from one system element to another. 

The acceptance of a bit into the DAR will, if properly 
masked by the DARM register, initiate an external inter- 
rupt. This interrupt is under further control of the current 
PSW (7) mask bit and places a bit (called the DAR bit) in 
position 31 of the interrupt code in the old PSW. 

An element check from another CE has special signifi- 
cance in the overall system. In effect, this is a call for 
assistance from a malfunctioning CE to another CE within 
the system. The ELC condition is unconditionally set into 
the DAR but is recognized only if the receiving CE is 
SCONed to the sending CE. If it is not thus SCONed, the 
condition is remembered until SCONed or until the DAR is 
reset by subsequent diagnostic operations. 

If the receiving CE is in state three, an external CE ELC 
is dealt with in the normal manner; i.e., is subject to gating 
by the SCON bit and masking by the appropriate select 
register position and PSW (7). If the receiving CE is in state 
two, one, or zero with the test switch off, however, the 
interrupt is dependent only on SCON gating; i.e., both 
select register and PSW (7) masking is ignored and the CE 
immediately assumes state three. At this point, the CE 
proceeds to assume program control of the system. 


Input/Output Interrupt 
e Eleven channels on three IOCEs. 
e Individually maskable by PSW. 


I/O interrupts provide a means by which IOCEs can notify 
their controlling CE of special conditions concerning the 
attached I/O devices. A maximum of 11 channels can be 
attached to the 9020 system; each is maskable by specific 
bits in the controlling CE’s current PSW [Figure 6-5(e)] . 

A request for an I/O interruption may occur at any time, 
and more than one request may occur at the same time. 
The requests are preserved in the IOCE until accepted by 
the CE. Priority is established among requests so that only 
one interruption can be processed at a time. 


IOCE-Processor PSW and Interrupt Action 

e Separate PSW in MACH storage. 

e Limited interrupt handling. 

As noted previously, the IOCE processor has its own PSW 


(Figure 6-7), which is limited in comparison with the CE 
PSW. As no I/O operations can be performed by the IOCE 


processor, the system mask consists of bit 7 only. This 
permits masking of external interrupts. No machine-check 
masking is provided, because machine checks are masked 
for the IOCE processor by the controlling CE. The program 
mask consists of bit 36 only; this is the fixed-point 
overflow mask bit. Because of the limited instruction set of 
the IOCE processor, bits 37-39 are not functional. 

Figure 6-8 lists the interruptions active in an IOCE 
processor: program, supervisor call, external and machine 
check. These PSWs are stored in MACH storage. 

Machine-check masking comes from bit 13 of the PSW in 
the controlling CE. When a machine check originates in an 
IOCE processor, the Common Logic Unit (CLU) sets the 
appropriate bit in the check register, issues an element 
check, and performs a logout when permission to do so is 
received from the controlling CE. After the logout, the 
IOCE processor stores its machine check old PSW in MACH 
but does not load a new PSW. Instead, process mode turns 
off. 


System Mask 


i estan Interruption Code 
Key 
ry 678 


MW 12 15 16 3a 


Fixed-Point Overflow Mask 


Viele] | | Instruction Address 


3233 3435 3% 37 39 40 63 


Figure 6-7. IOCE-Processor PSW 


SHARED STORAGE 
e Multiple CE or IOCE operation. 


Many independent storage elements exist within the 9020E 
system. Each of the SEs may be configured to communi- 
cate with any one or all of the available CEs and IOCEs and 
each DE may be conttigured to communicate with any or all 
of the CEs. Although the following discussion of shared 
storage is from the viewpoint of the CE, SEs are also shared 
by IOCEs. The examples of test and set and delay 
instructions apply to an IOCE as well as a CE. 

When two or more CEs are operating together to 
perform the ATC task, for example, certain storage 
reference tables are created and used by the CEs to 
determine the status of their particular task. This shared 
storage contains common data, results, programs, and 
restart information, all of which are updated by the various 
operating CEs. With all of this interactivity, interlocks are 
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Interruption Source Interruption Code Mask ILC Instruction 
Identification PSW Bits 16-31 Bits Set Execution 


PROGRAM 
(old PSW MACH 28 hex; new PSW MACH 68 hex; priority 2) 


Operation 0000 0000 00000001 
Privileged Operation 0000 0000 00000010 
Execute 0000 0000 00000011 
Protection 0000 0000 00000100 


Addressing 0000 0000 00000101 


Specification 0000 0000 00000110 
Data 0000 0000 00000111 
Fixed-pt. overflow 0000 0000 00001000 
Fixed-pt. divide 0000 0000 00001001 


SE stopped 0000 0000 10000000 


SUPERVISOR CALL 
(old PSW MACH 20 hex; new PSW MACH 60 hex; priority 2) 
Instruction bits 0000 0000 rrerrerr 


EXTERNAL 
(old PSW MACH 18 hex; new PSW MACH 58 hex; priority 3) 


Unused 0000 0000 nannnnn]l 
Controlling CE 0000 0000 annnnnin 
Unused 0000 0000 nannninn 
Unused 0000 0000 nnnninnn 
Unused 0000 0000 nnnInnon 
Unused 0000 0000 nnlnnnnn 
Interrupt switch 0000 0000 nlnnnnnn 
Timer 0000 0000 Innnnnnn 


NON ON ON NON N N 


MACHINE CHECK 
(old PSW MACH 30 hex; new PSW MACH 70 hex; priority 1!) 


IOCE malfunction 0000 0000 00000000 


Legend: 


Other external interruption conditions 
Unpredictable 
Bits of R) and Ro field of Supervisor Call 


*In CE PSW when operational mode; in 1OCE-processor PSW when 
diagnostic mode. 


Figure 6-8. IOCE-Processor Interrupt Action 


essential to prevent other CEs from referring to the 
common data, tables, or instructions while one of the CEs 
is updating the information. 

For example, if one CE attempts to update a storage 
location by executing an instruction that fetches data, 
updates it, and stores it back into the original location, it is 
possible for another CE, or an IOCE, to fetch or store data 
at that same location between the fetch and store cycles of 
the first CE. This would result in loss of the data stored by 
the second CE or IOCE. 

Several methods are available to synchronize these 
operations and place a “lock” on storage. One such method 
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Suppressed 
Suppressed 
Suppressed 
Suppressed/ 
Terminated 
Suppressed/ 
Terminated 
Suppressed 
Terminated 
Completed 
Suppressed/ 
Completed 
Suppressed/ 
Terminated 


Completed 


Completed 
Completed 
Completed 
Completed 
Completed 
Completed 
Completed 
Completed 


x x xX xX KK KX XK 


Terminated 


is through interrupts which can be programmed by means 
of the direct control instructions: Read Direct (RDD) and 
Write Direct (WRD). Coded data bytes can indicate the 
locking, unlocking, and testing of storage areas. In some 
cases, the immediate instructions (AND, OR, and EX- 
CLUSIVE OR) can be effectively used to force the SE to 
give the executing CE two consecutive storage cycles before 
allowing any other unit to access that storage. 

Another method of testing a storage area is the periodic 
program inspection of a particular storage location or bit 
position. The Test and Set instruction falls into this latter 
category. 


Test and Set Instruction (TS) 
e Executed by CEs or IOCEs. 
e SI format. 

e Tests storage availability. 

e Sets “lock” on storage area. 


The TS instruction fetches the indicated byte from core 
storage and tests the leftmost bit (bit 0) of that byte for a 
0/1 condition. As a result, the condition code is set to 0 or 
1, respectively. As the byte is returned to storage, all nine 
of the bits (including parity) are unconditionally set to 1’s. 

If the leftmost bit of the byte to be tested can be 
considered the lock, a 0 indicates an unlocked condition, 
whereas a 1 indicates a locked condition. Normally, a 
program would use the TS instruction only when it wished 
to operate with the storage area. Therefore, when the test is 
made and an unlocked (0 bit) condition is indicated, the 
area is immediately locked (reserved for the issuing CE) by 
having the lock bit set to a 1. Unlocking the area is 
accomplished by storage of a 0 in the lock bit by any one 
of a number of appropriate instructions. 

For the TS instruction to be effective, the ‘normal 
operation’ line must be inactive. 


Test and Set Example 


Assume that byte positions 5|000—5199 are a common data 
or table area and that byte position 5000 is considered the 
lock byte. Remember, however, that the size of the 
common area or the location of the lock byte is defined 
entirely by the program and is not restricted to a specific 
2048- or 4096-byte block as is the case with storage 
protection or preferential storage base addresses. 

Assume that CE 1 is the primary controlling CE in the 
ATC system and that CE 2 is the secondary CE; i.e., CE 1 is 
assigning the work (data) and CE 2 is performing the 
calculations on this data. 

Initially [Figure 6-9(a)], the common area is empty 
(logically, at least) and unloaded. A TS instruction to 
location 5000 [Figure 6-9(b)] tells CE 1 that the area is 
free and, at the same time, sets the lock on the area. With 
the lock set [Figure 6-9(c)], CE 1 can proceed to fill the 
data area without program interference from other CEs. A 
TS instruction from CE 2 tells its program that the 
common area is temporarily unavailable. At this point, CE 
2 can proceed with other routines or execute the Delay 
(DLY) instruction for a period of time. 

Remember that the lock condition imposed on the 
storage area by CE 1 is only a logical lock and not a 


hardware lock except to the extent of setting the condition 
code either to a 0 or a 1. Other system elements may also 
be using this storage element under conditions of configur- 
ation and priority. 

When the common area has been filled [Figure 6-9(d)] , 
CE 1 issues any one of a variety of “store” type 
instructions which replaces byte location 5000 (or at least 
the leftmost bit of that position) with 0’s. 

The next time CE 2 tests the lock position [Figure 
6-9(e)] , a resulting condition-code setting of 0 indicates an 
unlocked state. Consequently [Figure 6-9(f)], CE 2 pro- 
ceeds to process the data in the shared area. Any test by CE 
1 during this time finds the area locked. 

At the end of the data processing [Figure 6-9(g)] , CE 2 
unlocks the area by restoring the lock byte to 0’s. The cycle 
is now complete, and CE 1 can refill the area with new 
data. 


Delay Instruction (DLY) 

e Executed by CEs or IOCEs. 

e RR format. 

e RI1-R2 field contains count. 

e Terminated by interruptions or count = 0. 


The eight bit R1-R2 field is treated as a single count field 
(N). Execution of the DLY instruction causes a delay of 
approximately 256N usec. An initial count of 0 causes no 
delay; a maximum count of 256 provides a delay capability 
of over 65 ms. This delay is approximate and may be 
increased as a result of service requests from the interval 
timer. 

The DLY instruction is terminated by the count (N) 
being reduced to O or by the occurrence of an unmasked 
I/O, external, or machine-check interrupt condition. 

The DLY instruction is explained in this section because 
it is one means of awaiting the availability of shared storage 
areas when the TS instruction is used. 


RECONFIGURATION AND MULTISYSTEM OPERATION 
e Initial configuration established by SCON. 

e@ Storage allocation established by SATR. 

e Backup established by PSA setup and element states. 

The configuration control facility of the 9020 system may 


now be seen in the light of multisystem operation. The 
initial configuration of the 9020 system as established by 
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Figure 6-9. Test and Set Example 
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the SCON instruction, together with the storage allocation 
as established by the SATR instruction, determines the 
nature of the total multisystem operation. This initial 
organization is performed by a CE which is, at the moment 
at least, the master CE. Under control of the EXC program, 
the master CE builds a multisystem organization sufficient 
for the workload and appropriate to the current tasks. 

The configuration and storage allocation, thus estab- 
lished, determine which elements may communicate with 
each other, which groups of elements together constitute 
subsystems, which processors may share storage with other 
processors, and which elements shall monitor for errors and 
abnormal conditions. Inherent in this organization are 
provisions for backup in the event of malfunctions. This 
backup is established by the structuring of alternate PSA 
areas in appropriate storage elements and by the choice of 
element states in various subsystems so that elements 
engaged in tasks of lesser importance can be used to back 
up elements of primary importance. 

As has been noted, the 9020 system has elaborate 
provision for controlling this multisystem organization. 
Special hardware, instructions, and communications paths, 
together with an interruption-handling facility, enable the 
EXC program to coordinate the operation of all of the 


subsystems and provide the various programs with required 
services. In Chapters 7 and 8, overall system monitoring for 
errors and abnormal conditions is discussed in detail. This 
monitoring is under control of the EXC program via the 
external-interrupt facility and special hardware, such as the 
DAR and abnormal-condition signals which override the 
normal CCR-gated communication paths within the system. 

As a result of detecting a malfunction or an abnormal 
condition, the master CE may initiate procedures to isolate 
the condition and may reconfigure the system so that its 
primary task may continue with minimum time lost. If the 
malfunction or abnormal! condition involves the master CE, 
another CE can automatically take its place. That is, the 
actual processing of EXC program instructions can be done 
by a backup CE so that, while an element is lost to the 
system, the contro: program can still function. 

The EXC program can respond to requirements of the 
entire multiprocessing operation, when a reconfiguration is 
necessary, so that no primary function of the system is lost. 
This may involve terminating certain operations, elimina- 
ting certain lesser functions, establishment of new PSAs, 
reallocation of storage, relocation of programs, and the 
building of checkpoint records, all in addition to reconfig- 
uration. 
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e@ 9020 system performs ATC and non-ATC tasks. 

e ATC task is primary. 

e EXC must monitor elements in both categories. 

e@ Special hardware for monitoring non-ATC elements. 


The 9020E system consists of multiple elements which may 
be configured into subsystems to accomplish various tasks. 
These tasks may be divided into two major categories: ATC 
and non-ATC. The non-ATC category includes “good” 
elements running diagnostics (or other programs) and 
elements which are not “good” because of malfunctions, 
maintenance, or engineering change activity. 

The ATC task is performed by at least one subsystem 
and represents the primary function of the system. The 
Executive Control (EXC) program must monitor elements 
involved in non-ATC tasks insofar as they affect the overall 
capability of the system to accomplish its primary purpose. 
More explicitly, the system performing the ATC task must 
monitor certain classes of element malfunctions, which may 
be generated by other elements in state two, one, or zero 
and which are performing other tasks, since these other 
elements may be called on at any time for the ATC task. 
The normal system of hardware and software, by which the 
EXC program monitors the ATC task, is not sufficient for 
monitoring non-ATC tasks because CCR gating in the 
individual subsystems may isolate them, from the stand- 
point of data communication. Therefore, hardware is 
provided which overrides normal CCR gating to provide the 
needed system-wide monitoring capability for the EXC 
program. 

This chapter describes system-level monitoring of errors 
and abnormal conditions, together with the hardware 
provided for its implementation. Chapter 8 explains how 
the individual elements handle malfunctions within the 
framework of the larger system monitoring scheme. 


PROGRAM AND HARDWARE COMMUNICATION 


e Monitoring uses both program and hardware communi- 
cations. 


e Hardware communications used for malfunctions of 
specific interest to the EXC program. 


e@ Utilizes 9020 external-interruption facility. 


CHAPTER 7. SYSTEM MONITORING 


Monitoring takes on two general forms, namely, program 
communication and hardware communication. Program 
communication provides for certain element malfunctions 
(e.g., TCU logic errors) which are primarily of interest to 
the monitor program for the subsystem of which the 
element is a part. These malfunctions can then be brought 
to the attention of the EXC program in an orderly fashion, 
if required. 

Hardwarecommunication facilities are provided for cer- 
tain element malfunctions that are of specific interest to 
the EXC program directly. Included are items which cannot 
be handled by the subsytem (e.g., CCR failure or power 
failure), since normal lines of communication may not 
exist. Also, these elements might be idle, i.e., not part of a 
subsystem, when these conditions occur. Certain malfunc- 
tions in SEs or CEs might place the subsystem in such a 
position that program communication is no longer possible. 

The hardware-communication lines utilize the external- 
interruption facility of all CEs to notify the EXC program 
of a particular condition. Since the EXC program may be 
operating in any CE, each CE contains the needed hardware 
to monitor the entire system. 


OVERALL OPERATION 


Figure 7-1 shows the general method by which one element 
monitors the malfunctions of another. In the example, one 
CE is interrupted so it can control the analysis of a second 
CE which is malfunctioning. Simplifying assumptions have 
been made (e.g., intermittent parity check) to present the 
philosophy. The two CEs are labeled “‘malfunctioning’”’ and 
“attentive” since the attentive element need only be 
configured to listen to the malfunctioning CE. No indica- 
tion is given of the masking which could be done. 

The general course of action taken in this situation may 
be divided into four phases; these are labeled A, B, C, and D 
in Figure 7-1: 

A. The “malfunctioning” CE detects an error. It stops its 
current processing and generates an element check to all 
CEs. It then performs its own logout in three parts, as 
shown. 

B. An “attentive? CE responds to the element check by 
accepting an external interruption. It indicates to the 
“malfunctioning” CE (by alteration of a program in 
storage) that there is a listening element. The “attentive” 
CE then performs the necessary “first line” analysis of 
the situation to determine the immediate course of 
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action necessary. This could also'be extended to include 
a reasonably detailed analysis of logout data from the 
“malfunctioning” CE. 


C. The “malfunctioning” CE now waits until action is 
taken by the “attentive” CE. If the “malfunctioning” 
CE had not been informed that another CE had 
responded to its element check, it could start an analysis 
of its own logout data, the success of which would 
depend upon the nature of the condition. 


D. The ‘“‘malfunctioning” CE now responds to the course of 
action taken by the “‘attentive” CE. 


MalfunctionIng CE Attentive CE 


Hardware 


Software 


External 
Interruption 
Processing 


Logout 
1. Hard Core 
2, Micro Pgrm 


Machine Check Interrupt 


Indicate attentive 
CE available. 
Delay until 
logout complete. 


fait upon 
determining 
attentive CE 
available. 


Analysis of 
logout. Record 
malfunction. 
Determine action, 


Legend: 


| 
| * Program Functions 
| 


Figure 7-1. Monitoring of Element Malfunction 


MONITORING FACILITIES 


Certain system facilities are provided to enable system 
monitoring: 

1. Interelement signal lines 

2. Logout 

3. External interrupt ; 

4. Diagnose accessible register (DAR) 

5. Diagnose accessible register mask (DARM) 
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Interelement Signal Lines 
e Used to indicate abnormal conditions. 


e Causes external interrupt in CEs not masked against the 
interrupt. ; 


e Signals originating in CEs force receiving CEs to state 
three if receiving CE is properly set up. 


These lines, which exist between system elements and the 
CEs, are used to indicate that an abnormal condition (i.e., 
temperature out of tolerance check, power shutdown, CCR 
parity check, on battery indication, checkstop, or logic 
check) has occurred in that element. These external signals 
cause a single external interruption in each of the receiving 
CEs that is not masked against the condition. If the 
originating element is a CE, the signal brings into state 
three, all receiving CEs not in the zero state with Test 
switch on, provided these CEs are configured to accept a 
SCON instruction from the originating CE. 

This last point deserves special attention because it 
provides for the situation in which the CE in the ATC 
subsystem malfunctions and is unable to handle the 
malfunction itself. Since all CEs are interchangeable, the 
EXC program may operate in any one of them. By 
hardware-forcing all other available CEs into state three, 
provision is made for the continuing operation of the EXC 
program under these circumstances. Of course, at least one 
of the forced CEs must have the proper External Interrupt 
new PSW to allow it to begin execution of the EXC 
program. 

Upon receipt ot an interelement signal, the receiving CE 
takes appropriate action (under control of the EXC 
program) to determine the operational status of the 
originating element and (1) attempts to alleviate the 
condition which generated the external signal or (2) 
removes the element from the operational system. 

External signals resulting from the abnormal conditions 
mentioned previously fall into three categories: 

1. Element check (ELC): caused by an element failure 

(power or logic). 

2. Out of tolerance check (OTC): caused by element 
temperature becoming marginal. 

3. On battery signal (OBS): caused by an element switching 
from main-line power to battery-backup power. 


Figure 7-2 summarizes the conditions which generate the 
external signals that result in an external interruption. 
Logout 

e Logout performed by CEs and IOCEs. 


e Critical controls and registers stored in an SE. 


CE 
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during processing, the CE initiates its own logout. 
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Power Check 
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Check Stop *** 
Check Stop *** 
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Operational for 
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Down 


aE 


(IDES) bit. 


This is the status of the element if the generating 
condition occurs during logout. If it occurs 


during processing, the IOCE issues a machine check 
interruption request to its associated CE and waits 


TCU-RCU CCR Parity ELC Operational f satane 
Power Check ELC Down Recta a 


Figure 7-2. Hardware-Generated External Interruption Status Table 


A logout in a CE or an IOCE causes the orderly storing of 
control conditions and critical registers into a preferential 
storage area (PSA) in a storage element. The address of the 
specific PSA is pointed to by the preferential storage base 
address register (PSBAR) in the CE. Upon successful 
completion of a CE logout, a machine check (MC) 
interruption is automatically taken. The processing of the 
interruption may include the saving of additional registers 
for later analysis, immediate analysis of the malfunction, or 
simply a wait condition; the exact action depends upon the 
assigned task of the CE. 

Logout in the IOCE is not initiated until a request is 
made to the controlling CE for an MC interrupt. The IOCE 


receives the PSA address from the controlling CE, logs out, 
and indicates to the CE that logout is complete. At that 
time, the CE completes the MC interrupt and may analyze 
the IOCE malfunction. In the case of a selector channel 
error, the IOCE presents an I/O interrupt request to the 
controlling CE to request permission to logout the selector 
channel. 

Logout of SEs and DEs is under program control of a 
CE, and the data is automatically placed in an SE specified 
by the CE performing the logout. 

Detailed malfunction information is available for TCUs, 
RCUs, and DAUs via the normal I/O Sense command. 

Logout is discussed in detail in Chapter 8. 
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External Interruption 


e Allows CEs to monitor system conditions while process- 


ing. 


e Normal and abnormal interruptions. 


This facility allows the CEs to continually monitor system 
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Figure 7-3. External Interrupt Handling 
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conditions of selected elements while simultaneously per- 
forming the normal processing functions. 

The external interruption scheme of the 9020E system is 
provided to allow programmed signaling between various 
CEs and hardware signaling between the system elements 
and the CEs. Whenever an external interruption is accepted 
by a CE, a unique bit is set in it. The external interruptions 
are completely maskable by bit 7 of the current PSW, 
except as signified in Figure 7-3. The interruptions are 
divided into two classes: normal and abnormal. 


Timer at limit or 
INTERRUPT 


pushbutton. 


Enabled by 
CCR communication 
bits 


Set interruption Set interrupt 
code for code for 


issuing CE timer or 
and for INTERRUPT 


pushbutton. 


operation, 


Take external 
interrupt. 


Normal Interruptions 

e Program-controlled. 

e Not related to system check conditions. 

Normal interruptions are program-controlled and are not 
related to system check conditions. The source of an 


external interruption is available to the program from bits 
20 through 31 of the external old PSW (Figure 7-4). 


Figure 7-4. Old PSW, Interruption Source 


The interruptions that result from CE Read and Write 
(Direct) or I/O Processor Write Direct instructions are 
under control of the CCR described previously. The 
interrupt and timer bit positions in the PSW are set 
regardless of the CCR. This type of interruption is 
described in detail in 9020D/E System Principles of 
Operation manual. Normal interruptions do not require use 
of the diagnose accessible register (DAR), which is 
described later. Bit 31 of the PSW, which indicates a 
DAR-type interrupt, is not set for normal interruptions. 


Abnormal Interruptions 
e Hardware-generated. 
e Indicate failures or impending failures. 


e Set bit in DAR. 


Abnormal interruptions result when an external signal sets a 
bit in the DAR (Figure 7-5). The signals which do this are 
the hardware-generated signals of current or impending 
failures. Each signal of this class causes an appropriate bit 
to be set in the DAR. This, in turn, causes an external 
interruption if the CE is not set to mask off external 
interruptions. The DAR bit (bit 31 in the old PSW) is set at 
the time the interruption is taken to identify the inter- 
ruption source. 

The components of the external interruption system of 
each CE, with usage and control, are defined in the 
subsequent paragraphs. 


I SE ELC RCU 

1 2 ELC 
A {B{A|B BI 1/2 {344 1{2 1 {2 {3 [4 
0123 5 6 1011 15 16171819 20 21 2324 2526 27 3031 


Figure Diagnose Accessible. Register (DAR) 


Masking 


e Bit 7 of current PSW normally masks all external 
interrupts. 


e Abnormal interrupt: r asked by DARM. 


Bit 7 of the curser 13W is used to mask external 
interruptions with gnc . x. 2ption. If the CE is in state two, 
one, or zero (with Test s-vitch off), a CE ELC with the 
correspe iding SCON bit on is sufficient to force an 
externa! interrupt and ov. de mask bit 7. If mask bit 7 of 
the current PSW is a one, “mal interruptions can proceed 
as usual; abnormal interru, ‘ »ns may be subject to further 
masking by the DAR mzsk ¢. ARM). If mask bit 7 is a zero, 
all interruptions are heid perding until this bit is set to a 
one or the CE is reset. Exch bit in DAR represents a specific 
reason for an external-interrupt request. If (while external 
interruptions are r.asked off) more than one of the external 
signals is received, more than one bit is set in DAR. When 
interruptions are again allowed, only one occurs, but a 
reading of DAR will show all of the reasons for the 
interruption request. However, if a particular signal is 
received more than once while interruptions are masked 
off, all but the first is lost, since a given DAR bit can be set 
only once. 


PSW Interruption Code 


e Bits 20-31 of PSW identify external-interruption 
source. 


e PIR bit. 
e DAR bit. 


Bits 20 through 31 of the PSW contain the identification of 
the external-interruption source The appropriate PSW bit is 
set at the time the external interruption is taken. Figure 7-4 
shows the source identification. 

The eight bits associated with CE Read and Write 
Directs, specifying data communication, are gated by the 
CCR. That is, if the CE is not configured to listen to the 
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requesting CE or is in test, the request is ignored, and the 
bit in the interruption code is not set. If the CE is 
configured, the appropriate bit is set in the PSW and an 
external interruption is taken if not masked off by PSW bit 
7. 

The Interrupt and timer bits are set any time the source 
signals arise and the interruption is taken if not masked off 
by bit 7. 

The PIR bit (30) refers to a special three-position 
register used to identify external interrupts from an I/O 
processor. The bits are gated with the IOCE bits in CCR, 
and the interrupt is taken if not masked by PSW bit 7. 

The DAR bit refers to a special register that contains a 
group of interruption identification conditions too numer- 
ous to be included in the PSW. The DAR bit is set at the 
time the external interruption is taken. 


Diagnose Accessible Register (DAR) 
e Accessed only via a Diagnose instruction. 


e Stores hardware-generated external-interruption — re- 
quests. 


e DAR is reset when it is read out. 


The DAR is so named because it is not normally an 

addressable register; a Diagnose instruction is required for 

access. This register is used to store and identify hardware- 
generated external-interrution requests. At the time of an 
external interruption, this register is read to supplement the 

PSW. The conditions that set this register are illustrated in 

Figure 7-2. The register layout is shown in Figure 7-5. 

When any element generates one of the specified 
interruption requests, its identification bit is set in DAR. 
This bit will cause an external interruption if the mask 
conditions are met. These conditions are: 

1. Each position of the DAR has a epee tied mask 
position in the DAR mask (DARM, to be described 
later). If the DARM bit is 1, and bit 7 in the current 
PSW is set to 1, an external interruption occurs at the 
completion of the current instruction, with the DAR bit 
in the old PSW set to 1. (The following section describes 
the special masking technique for IOCE bits in the 
DAR.) 

2. When a CE is in state two, one, or zero (with the Test 
switch off), CE ELCs cannot be masked off; i.e., mask 
bits are ignored if the CE is configured to receive a 
SCON instruction from the originating CE. 


The bits in the DAR remain set until a read instruction 


(Diagnose) is issued to the register; then the entire register 
is reset. 
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The character of each signal (pulse or level) that sets 
DAR is specified in Chapter 8. If the signal that sets DAR is 
specified as a pulse, reading of DAR clears the affected bit, 
and it is not set again unless, of course, the condition 
recurs. If the signal that sets DAR is a level, reading of DAR 
clears the bit momentarily, but it is immediately reset. This 
forced setting of DAR continues until the condition causing 
the signal is cleared. However, an examination of these level 
signals will show that there should be no ambiguity in 
interpretation, since a level will indicate either a non- 
determinable time for the condition (e.g., OTC or power 
off) or will indicate that the condition causing the signal 
has also forced the affected unit to cease operation and 
require assistance. This method of signaling, in fact, is 
valuable in determining whether an element can perform 
some degree of self-diagnosis or must be assisted. For 
example, assume that a CE has detected an error and 
generates a check signal. This is sent to all other CEs as an 
ELC and will set the appropriate DAR bit. This signal is a 
pulse; when read by the receiving CE, the receiving DAR bit 
is cleared. The CE which generated the ELC proceeds to 
logout to the PSA. Suppose, however, that the CE is unable 
to perform this logout. This could occur for several reasons, 
but is usually because of double errors. The CE would 
generate a second ELC and stop. This signal, however, is a 
level. A receiving CE, if it read its DAR twice in succession, 
would find the DAR bit still set. This static ELC would 
remain until the CE which generated it was restarted by 
external means. 

When DAR is read via Diagnose, the entire register is 
obtained without regard for any mask which may be used 
to control interruptions. No interruptions set DAR during 
the read operation. 


Diagnose Accessible Register Mask (DARM) 


e Accessed by Diagnose instruction. 
e@ One bit for each DAR bit except IOCE bits. 
e One DARM bit masks both IOCE DAR bits. 


The DARM is program-addressable (write) by a special 
Diagnose instruction. It permits program control over the 
conditions from the other elements that will be allowed to 
cause an external interruption in this CE. The CCR limits 
normal data flow between the various system elements; the 
DARM independently limits exception data flow between 
the system elements. 

DARM contains a position for each position of DAR, 
except as noted in the next paragraph. If the DARM 
position is set to one, a corresponding interruption request 
through DAR will, if not further masked by PSW bit 7, set 


the DAR bit in the PSW and request an external interrup- 
tion. If the DARM is zero, corresponding positions of DAR 
will not cause the DAR bit to be set in the PSW. Note 
previously mentioned exceptions on CE ELCs. 

Only two bits are allotted for each IOCE. These bits are 
encoded (Figure 7-5) and cannot be considered distinct 
indications. DARM masks both bits for each IOCE with a 
single mask bit. Specifically, the masking arrangement is as 
follows: 


DAR Bits DARM Mask Bit 
0,1 0 
2,3 2 
4,5 4 


DARM bits 1,3, and 5 are not used. 


SYSTEM MONITORING OF ABNORMAL CONDITIONS 


The conditions which generated external interruptions were 
described previously. Here, all signals that represent ab- 


EXT EXT 
(to itself 


(to itself 
only) only) 


(Pulse OBS 
when 
receiving 
SCON) 


Legend: 
EXT - External interruption to all listening CE's. 
PGM - Program interruption handled by the subsystem 
monitor in normal programming fashion. 


normal conditions and the manner in which they are 
monitored by the system are discussed, whether or not an 
external interruption is generated. Figure 7-6 summarizes 
the handling procedure. 


Power Supply Abnormal Conditions 


e Power supply failure or power-down condition results in 
ELC. 


A power supply output malfunction or a power-down 
condition in any major element causes an ELC condition to 
be generated for that element at each of the CEs. 


Marginal Temperature Condition 


(Out of Tolerance Check or OTC) 


e Ajl major elements monitor internal temperature. 


e Overtemperature condition results in OTC. 


e Pushbuttons on each element permit simulation of OTC 
condition for test purposes. 


Logic Check 


EXT plus specific 
error indication 
to using element. 


EXT plus specific 
error indication 
to using element. 


EXT (CLU errors) 
PGM (Certain Sel 
Chan and Storage errors). 


Figure 7-6. Summary of Procedure for Handling External Interruption Signals 
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All major elements are implemented with sensing devices 
for monitoring their internal temperature. A marginal 
temperature condition is reported to the system as an out 
of tolerance check (OTC). Pushbuttons are provided on 
each element to simulate the OTC condition for testing. 
The following OTC indications have been defined for each 
element of the system: 

CE: An OTC condition in a CE causes that CE to take an 
external interruption. This condition causes a unique 
identification bit to be set in the DAR of the CE to allow 
indentification of the cause. 

It is expected that each CE can handle its own OTCs 
since they do not indicate an error condition but warn of a 
marginal condition in the element environment which could 
result in an error in the immediate future. If the CE cannot 
finish its expected action before a power shutdown, the 
ELC which results from the power shutdown alerts the 
remaining CEs to the condition. 


SE: An OTC condition in an SE causes that element to 
generate an ELC which is sent to all CEs. Those that are not 
masked for that condition take an external interruption. 
This condition sets a unique identification bit in DAR. The 
functional capability of the SE is not impaired by the 
generation of this ELC. An SE logout is necessary to 
further isolate the ELC-originating conditions. 


DE: An OTC condition in a DE causes that element to 
generate an ELC which is sent to all CEs. Those CEs that 


are not masked for that condition take an external 


interruption. This condition sets a unique identification bit 
in DAR. The functional capability of the DE is not 
impaired by the generation of this ELC. A DE logout is 
necessary to further isolate the ELC-originating conditions. 


IOCE: An over temperature condition in an IOCE causes 
that element to generate an OTC which is sent to all CEs. 
Those that are not masked for that condition take an 
external interruption. This condition sets a unique identifi- 
cation code in DAR. The functional capability of the IOCE 
is not impaired by the generation of this OTC. 


TCU: An OTC condition in a TCU causes that element 
to generate an ‘attention’ on its IOCE-TCU interface as part 
of the status byte either at the end of an operation or when 
an attempt is made to select the TCU. The ‘attention’ signal 
is used only for OTC indications by this unit. This 
interruption condition is handled in the same manner as 
any other I/O interruption condition. The generation of the 
OTC condition does not affect the operational capabilities 
of the TCU. 


RCU: An OTC condition in an RCU causes generation of 
a pulsed ELC which is sent to all CEs. Those that are not 
masked for that condition take an external interruption. 
This condition sets a unique identification bit in DAR. The 
functional capability of the RCU is not impaired by the 
generation of this ELC. A Sense command through the 
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IOCE is necessary to detect that an OTC condition exists. 
The sense data includes, among other things, an OTC bit 
and a CCR parity bit. 


On Battery Signal (OBS) | 


e CE, IOCE, SE, and DE generate OBS when switching to 
- battery power. 


e Pushbuttons on each element permit simulation of OBS 
condition for test purposes. 


Four of the major elements of the system (CE, IOCE, SE, 
and DE) have battery backup in case of power failure. A 
means is provided to signal when the batteries are being 
used. Switching from normal operation to batteries causes 
an ‘on battery’ signal (OBS) to be generated. A pushbutton 
is provided at each of these elements to simulate the OBS 
condition for testing. This OBS is treated in the following 
manner for the affected elements: 

CE: Only the generating CE receives its own OBS signal; 
this signal causes an external interruption. This condition 
sets a unique identification bit in DAR. The operational 
status of the CE is not affected by the generation of the 
signal. 

SE: The SE transmits its OBS signal under the common 
heading of ELC to all CEs. These CEs, if not masked for the 
condition, take an external interruption. This condition sets 
that SE’s unique ELC bit in DAR in the CE. An SE logout 
is necessary to determine the cause of the ELC. The 
generation of the signal does not affect the operational. 
capability of the SE. 

DE: The DE transmits its OBS signal under the common 
heading of ELC to all CEs. These CEs, if not masked for the 
condition, take an external interruption. This condition sets 
that DE’s unique ELC bit in DAR in the CE. A DE logout is 
necessary to determine the cause of the ELC. The genera- 
tion of the signal does not affect the operational capability 
of the DE. 

IOCE: The IOCE transmits its OBS to the CEs as a level. 
The CEs, if not masked for the condition, take an external 
interruption. A unique OBS identification code is set in 
DAR in the CE. The operational status of the IOCE is not 
affected by the generation of this signal. 

To enable rapid identification, a CCR parity check, 
when receiving a SCON, is signaled as a pulse in the OBS 
line. 


CCR Parity Check 


e@ Every major element has a CCR. 


e@ CCR parity check condition causes element to generate 
< ELC. . Pe 


e IOCE pulses OBS line if a CCR parity check occurs 
during a SCON. 


Every major element has a CCR register. Parity is continu- 
ally monitored on this register by the element; whenever 
incorrect parity is detected, an ELC is generated. However, 
if the CCR is being loaded, generation of ELC is suppressed 
since other means are used to inform the EXC program of 
the condition. This ELC is transmitted to all CEs. Those 
that are not masked for that condition take an external 
interruption. The ELC condition causes an ELC identifica- 
tion bit or code to be set in DAR. 

If an element’s CCR is set to allow no CE to issue a 
SCON to the element, this element would be lost to 
automatic system control if hardware were not provided to 
detect and overcome this condition. 

When this condition is detected, CCR SCON field gating 
is bypassed, and the element accepts a SCON from any CE, 
provided that the element is not in state zero. If an element 
is in state zero, and its SCON field is set to all zeros, it is 
presumed to be a desired condition, and all SCONs are 
rejected. 

A special indicator is used for CCR parity checks that 
occur in the IOCE during the receipt of a SCON. This is a 
pulse on the OBS line. This unique indication provides for 
easy identification of the error by the program. The normal 
OBS indication is a level. 

The generation of an ELC as a result of a CCR parity 
check in any element does not affect the operational 
capability of the generating element except insofar as CCR 
gated communications with other elements are concerned. 
Further analysis of the condition requires logout or sensing 
of the element. 


Checkstop 
e Major elements implemented with checkstop capability. 
e Enables element to stop when error is detected. 


e Results in level ELC. 


All major elements are implemented with a checkstop that 
permits them to stop upon detection of an error condition. 
The checkstopped condition always results in an ELC being 
issued to all listening CEs. 

CE and IOCE: In the CE and IOCE, checkstop results 
when the element is unable to continue operation (e.g., 
when a logic error occurs during a logout). A level ELC is 
issued to all listening CEs. 

SE and DE: In the SE and DE, a checkstop occurs when 
an error is detected. A pulse ELC is issued as a result of the 
error, and the element waits 2.5 usec for a signal from the 
using element requesting it to stop for logout. If the ‘logout 
stop’ signal is received, the SE or DE is effectively 
checkstopped and issues a level ELC to all CEs. An ‘SE 
stopped’ or ‘DE stopped’ signal is also issued to all 
configured elements. 


Logic Check 
e Every element checks for internal errors. 


e Logic check reporting varies from element to element. 


Every system element has built-in internal checking proce- 
dures, described in the following section. This section does 
not include the CCR which has already been described. 

CE: An internal logic check causes the CE to signal an 
ELC to all other CEs. The CE that has the logic check may 
proceed with a logout, depending upon whether its ma- 
chine-check interruption is masked on or not. 

SE: An internal logic check in an SE is signaled only 
when another element is using it. The signal appears as a 
‘pulse ELC’ to all CEs, as an ‘address check’ or ‘data check’ 
to a CE user, or as a ‘storage check’ to an IOCE user. 

DE: An internal logic check of a DE may be signaled 
when either a CE or a display generator (DG) is using it. If 
signaled while a CE is using it, the signal appears as a ‘pulse 
ELC’ to all CEs and as either an ‘address’ or ‘data check’ to 
the using element. If signaled because of a logic malfunc- 


tion related to a DG access, the signal appears as a ‘level 


ELC’ to all CEs. 

IOCE: An internal common logic check (or multiplexer 
channel check) causes the IOCE to checkstop and signal an 
ELC to all CEs, the reception of which was described 
previously. The IOCE then requests a special machine-check 
interruption which allows it to log out from the configured 
controlling CE. The IOCE suspends I/O-processor opera- 
tions until the controlling CE reinitiates them. 

A malfunction in the hardware of a selector channel 
causes that channel to stop. The IOCE requests an I/O 
interruption of its configured CE. When the interruption is 
permitted, the selector channel is logged out and the 
interruption is performed. 

TCU: The TCU attempts to signal the IOCE of any logic 
failures and expects remedial action through the IOCE 
using normal I/O checking hardware (and software). Mal- 
functions affecting only an individual tape drive or associ- 
ated path do not affect the operation of the remainder of 
the TCU. Malfunctions originating from the common logic 
of the TCU affect the entire TCU system. 

RCU: The RCU attempts to signal the IOCE of any logic 
failures and expects remedial action through the IOCE 
using normal checking hardware (and software). Malfunc- 
tions affecting individual configuration interfaces do not 
affect the remainder of the RCU. However, common 
channel logic malfunctions do affect the entire RCU. 

DAU: The DAU attempts to signal the IOCE whenever a’ 
logic failure occurs and expects remedial action through the 
IOCE using normal I/O checking hardware (and software). 
Malfunctions originating within the DAU affect operation 
of the entire DAU. Those checks emanating from RKMs do 
not affect DAU operation with other RKMs. 
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e Individual elements contain error and abnormal condi- 
tion detection circuitry. 


e Elements vary in degree of sophistication. 
e Internal and external errors. 


e Six types of abnormal conditions. 


Individual elements of the 9020E system contain circuitry 
for error checking, abnormal condition monitoring, and 
malfunction handling. Different element types vary in their 
degree of sophistication. For example, the CE is capable of 
accessing and executing complex programs, whereas the SE 
is limited to a few basic operations. Thus, malfunction 
handling in the different elements ranges from complex 
analysis and system reconfiguration to simple error detec- 
tion and reporting. The different element types may be 
thought of as falling into echelons based upon their degree 
of sophistication. The lower echelon elements detect errors 
and abnormal conditions and report them to higher echelon 
elements until the reported condition ultimately is acted 
upon at the subsystem or system level. 

Each element is provided hardware facilities to detect 
errors that occur within its internal logic. In addition, when 
two types of elements work together, one is provided 
facilities for handling malfunctions occurring at the inter- 
face or arising out of their interrelated operation. Such 
malfunctions are termed external. For example, an JOCE 
receiving data in bad parity from a CE, via the control bus, 
takes no action itself but reports the error to the CE. The 
malfunction may have occurred at the IOCE, but the CE 
handles it as if it were a CE logic check. This distinction 
between internal and external errors is helpful in under- 
standing how the malfunction-handling facilities of the 
individual elements fit together in a unified malfunction- 
handling capability. 

Possible abnormal conditions fall into six categories in 
the 9020E system. These were described in Chapter 7 from 
the system standpoint. They are briefly described in the 
following text from the standpoint of the individual 
element. The detailed handling of these abnormal condi- 
tions by the individual elements is described later in this 
chapter. The six categories of abnormal conditions are: 

1. Abnormal power condition: Power down and power 
check. 
2. Abnormal temperature condition: out of tolerance 

check (OTC). . 

3. ‘On battery’ signal (OBS). 


CHAPTER 8. ELEMENT MALFUNCTION HANDLING 


4. CCR parity check. 
5. Checkstop. 
6. Logic check. 


An abnormal power condition may indicate a malfunc- 
tion in an element’s power system (power check) or that 
power has been turned off for scheduled maintenance 
(power down). In either case, the system must be alerted to 
the fact that the element is not in its normal operational 
condition and cannot be called upon to participate in the 
ATC task. 

An overtemperature condition in an element may 
presage logic checks or a catastrophic power down. The 
OTC signal allows the system to prepare for the loss of the 
element by reassigning its task to a backup element. 

‘On battery’ signal (OBS) is an abnormal condition that 
is monitored by all elements that contain battery backup 
power sources so that the system can be alerted to the 
impending loss of the element and respond accordingly. 

A CCR parity check can interfere with an element’s 
ability to communicate with other elements with which it is 
working. This condition is monitored by all elements, and 
the system is immediately alerted when it occurs. 

A checkstop is implemented in each major element of 
the 9020E system. This permits the element to stop upon 
detection of a malfunction. The element may continue 
operation after alerting the system to the condition or it 
may be unable to continue, depending on the nature of the 
malfunction. In either case, the stopped condition is 
reported to the system via the ‘element check’ (ELC) signal. 
The ‘level ELC’ signal is used to indicate that the element 
cannot continue without external assistance, whether from 
other elements of the system or from operating personnel. 

Logic checks, internal and external, constitute abnormal 
conditions that are reported to the system by the individual 
elements. 

The handling of logic checks by the individual elements 
is usually more involved than the handling of other 
abnormal conditions. Thus, logic checks are given special 


‘emphasis, later in this chapter, in the discussion and 


flowcharts for the individual elements. 


ERROR RECORDING 
e Error information retained by individual elements. 


e Error information available to EXC program via logout 
or Sense command. 
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An element reporting a logic check must retain sufficient 
information for the system to determine the nature of the 
error so that it can react appropriately. All elements 
contain registers in which error information is retained 
temporarily. In the CE and IOCE, these are the check 
registers; in the SE and DE, error triggers are provided for 
the retention of error information. The TCU, RCU, and 
DAU retain error information in the status and sense 
registers. 

This information is made available to the EXC program 
for analysis via the logout facilities or, in the case of the 
TCU, RCU, and DAU, via the I/O Sense command. 


Logout 
e CE, IOCE, SE, and DE can be logged out. 
e@ CE and IOCE can perform logout. 


e IOCE must receive permission from controlling CE 
before performing logout. 


e SE and DE logged out by CEs via Diagnose instruction. 


Logout was described briefly in Chapter 7. Here, a detailed 
description is presented from the standpoint of the individ- 
ual elements. Later in the chapter, logout is treated as an 
integral part of the individual element malfunction-handling 
capability. 

Logout is the process of automatically storing the 
contents of various registers of an element into a preassign- 
ed location in the PSA area of main storage. This is done in 
a manner that permits the actual parity of the data to be 
preserved, whether it was correct or not. 


The CE, IOCE, SE, and DE can be logged out. The CE is 
capable of performing a logout of its own registers. The 
IOCE also has this facility but does not log out without 
first requesting permission from the CE with which it is 
working. This is necessary so that the IOCE can obtain the 
CE’s PSA address from the CE and can alert the CE that 
logout is taking place. SEs and DEs are logged out under 
control of a CE. They can stop for logout upon request by 
a CE or IOCE and can send logout data to a CE as the latter 
requests it. The CE uses the Diagnose instruction to 
accomplish logout of SEs and DEs. 


Figure 8-1 shows the layout of the logout area in the 
PSA. The CE logs out 48 words (192 bytes), starting at 
location 80 (hex) and extending through the word at 
location 13C (hex): The last byte of the last word is at 
location 13F (hex). 
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Address 
of Word 


PSW's, CSW, CAW, etc. 


CE Logout Area 
(48 words) 


Selector (34 words) > —® Logout 
Channel Area 
Logout Area (45 words) 
(11 words) 


. This word is used by the IOCE for temporary storage of the 
SDR during logout. At completion of logout, this word 
should contain all zeros and should be in good parity. 


2. SE and DE logout data locations are not fixed but are 
specified by the Diagnose instruction which initiates the 
logout. 


Figure 8-1. PSA Logout Area Locations 


The word at location 140 (hex) is used by the IOCE for 
temporary storage of the storage data register (SDR) during 
logout. At the end of the logout, this word should contain 
all zeros and should be in good parity. 

The IOCE logs out 45 words (180 bytes) during a 
complete logout. The IOCE logout area begins at location 
144 (hex) and extends through location 1F4 (hex). The last 
byte of the last word is at location 1F7 (hex). 

The selector channel portion of the IOCE logout area 
comprises 11 words, starting at location 1C8 (hex) and 
including the word at location 1FO (hex) which is the next 
to the last word of the IOCE logout. The last word is part 


of the multiplexer channel logout. 
A partial CLU logout includes all of the LOCE logout 


except the selector channel; i.c., CLU, common channel, 
and multiplexer channel. The partial logout starts at 
location 144 (hex) extends through the word at 1C4 (hex) 


and includes the single word at location 1 F4 (hex). 
Note that the logout area for an SE or a DE is not fixed 


but is specified by the Diagnose instruction that initiates 


the logout. 
The logout format for the IOCE may be found in the 


IOCE Theory of Operation Manual; the logout formats for 
the CE, SE, and DE may be found in the Diagram Manuals 
for the respective elements. 


CE Logout 

e CE logout may be initiated in four different ways. 

e Logout data placed in PSA starting at location 80 (hex). 
e Logout data consists of 48 words. 


A diagnostic logout may be initiated in a CE in four 
different ways. Each method causes a specific identifier bit 
* to be set in the check register of the CE logging out and 
causes a machine-check interruption request to be pre- 
sented. Provided machine-check interruptions are not 
masked off, the logout is performed and a machine-check 
interruption is taken. If machine-check interruptions are 
masked off, both the logout and machine-check interrup- 
tion requests remain pending. 

When a CE logs out, the log ‘iPotmations is placed in 48 
contiguous words of the PSA, extending from byte location 
80 (hex) through byte location 13F (hex) inclusive. 


Logout Initiated by Another CE. Another CE may initiate 
the logout by executing Write Direct, specifying the CE to 
be logged out. Provided the scon bit for the CE initiating 
the logout is already set on in the CCR of the receiving CE, 
bit 26 is set in check register 2. If the machine-check 
interruptions are not masked off, the logout is performed 
and the machine-check interruption is taken. 


Logout Initiated by an Address or Data Check. When an 
address check or a data check is received from a configured 
SE or DE on any storage reference, other than to the 
alternate PSA, and provided masking conditions are satis- 
fied, a CE logout occurs. Bit 11 or 12 is set in check register 
2 to identify the cause of the logout. 


Logout Initiated by a Storage Timeout Check. When a 
storage timeout check occurs as a consequence of an 
attempt to access a configured SE or DE, bit 10 of check 
register 2 is set. on, and a logout is carried out, subject to 
the machine-check masking conditions described prev- 
iously. 


Logout Initiated by an Internal Check..When an internal 
check (CE machine check) is detected in the CE, the 
appropriate check bit is set in check register 1 or 2. If 
machine checks are not masked, the logout is carried out, 
and a machine-check interruption is taken. 


IOCE Logout 


e JOCE performs two types of logout: CLU and selector 
channel. 


e Only one selector channel logged in any one logout. 


e If no selector channel is in operation when CLU logout 
is initiated, the selector channel area is set to all zeros. 


The IOCE performs two types of diagnostic logout: 
common logic unit (CLU) logout and selector channel 
logout. CLU logout information includes the common logic 
unit (CLU), common channel, multiplexer channel, and one 
selector channel, provided the latter is involved in the 
malfunction. When no selector channel is involved, all zeros 
are stored in the selector channel logout area (logwords 
114-124). This is termed a partial CLU logout. A CLU 
logout may be initiated by an IOCE or a CE. CLU logouts 
initiated by the IOCE request a machine-check interruption. 
from the controlling CE. The logout occurs when the 
interruption is permitted. CLU logouts initiated by the CE 
executing Write Direct do not request machine-check 
interruptions. 

The selector channel logout uses words 114—124 and 
applies only to the selector channel involved. Selector 
channel logouts are initiated by a request for an I/O 
interruption in the controlling CE. The logout occurs when 
the interruption is permitted. An exception to this occurs if 
the channel is setting up an I/O instruction and has not yet 
released the CE by sending response. In this case, PSBAR is 
already available on the control bus and the logout can 
proceed immediately. 


CLU Logout. A CLU logout may be initiated in an IOCE in 

three different ways: 

1. A CLU check (IOCE machine check) is detected during a 
normal operation (i.e., I/O operation or IOCE-processor 
operation) or during a selector channel logout. 

2. A selector channel logout-request condition is detected 
while a Test Channel instruction is being processed. 

3. An IOCE logout signal is received from a CE executing 
Write Direct, with the IOCE to be logged out specified. 


When a CLU logout is initiated in accordance with Step 
1 or 2, above, the IOCE issues a pulsed ELC to all CEs in 
the system, requests a machine-check interruption from the 
controlling CE, and waits in check-stop condition until the 
machine-check interruption is allowed. When it is allowed, 
the IOCE logs out into the PSA and ends the operation by 
issuing a response to the CE. In addition, when the CLU 
logout is initiated by a CLU check during an IOCE-pro- 
cessor operation, the IOCE stores its old machine-check 
PSW in MACH 48 upon completion of a successful logout. 

The manner in which the CE handles an IOCE machine- 
check interruption request is as follows. If an I/O instruc- 
tion is in process, the CE terminates the operation, storing a 
condition code 3 in the PSW. If machine-check interrup- 
tions are not masked off, the IOCE is allowed to start the 
logout. If no I/O instruction is in process, and machine- 
check interruptions are unmasked, the IOCE is allowed to 
start the logout at completion of the current CE instruc- 
tion. The CE waits during the logout; upon its completions 
a machine-check interruption is taken. 
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An IOCE logout may be initiated by a CE executing 
Write Direct, provided the communications bit for the CE is 
already set in the IOCE’s CCR. The IOCE sets bit 8 in 
check register 2 and proceeds while the CE waits for it to 
indicate that the logout is complete by sending ‘response’. 
Upon receipt of ‘response’, the CE sets the condition code 
to zero and fetches its next instruction. If a timeout occurs, 
a condition code of 3 is set and instruction fetching is 
resumed as before. 

When a CLU logout occurs, IOCE-processor operation 
ceases and the IOCE goes into the wait loop when logout is 
completed. 


Selector Channel Logout. When an IOCE detects a check, 
other than a channel data check which is entirely associated 
with the selector channel hardware, a selector channel 
logout is initiated. The IOCE terminates the affected 
channel operation, logs it out, and resets it. Depending 
upon the current activity in the IOCE, one of the following 
occurs: 

1. If an I/O instruction other than Test Channel is in 
progress, the IOCE logs out the selector channel and sets 
bit 45 (channel control check) or 46 (interface control 
check), as is appropriate, in the CSW. A response is 
returned to the controlling CE with condition code 1. 
The instruction is terminated, and the CSW is stored. 

2. If the Test Channel instruction is in progress, a full CLU 
logout is taken. 

3. If a data transfer is in progress, the IOCE requests an I/O 
interruption in the controlling CE. When permitted, the 
selector channel is logged out. Appropriate bits are set in 
the CSW as in step 1, above, and a response is returned 
to the controlling CE. 


If I/O interruptions are masked off, the affected channel 
waits in stopped state until the interruption is allowed or 
until the IOCE receives a ‘logout’ signal from the CE via 
Write Direct. 

When a selector channel logout occurs, any concurrent 
IOCE-processor operation is suspended during the logout 
and is resumed upon its completion. When a check is 
detected during a selector channel logout, full CLU logout 
is initiated. 


SE Logout 


e SEs must be placed in logout-stop status by CE or IOCE 
before being logged out. 


e@ Only CEs can log out an SE. 
e SEs logged via Diagnose instruction. 


e Logout data placed in storage at location specified by 
the Diagnose. 
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In order to initiate a logout operation for a storage element, 
the SE must first be placed in logout-stop status by a 
‘logout stop’ (LOS) signal from a CE or an JOCE. SE 
accepts a LOS signal from an issuing element if its 
communications bit is set on in the SE’s CCR and, in the 
case of an IOCE, if the ‘response’ latch for that IOCE is set 
in the SE. 


LOS from CE. Logout stop is automatically issued by a 
computing element whenever it receives an address check or 
a data check, provided machine-check interruptions are not 
masked off, a CE logout is not in progress, and the inhibit 
logout stop (ILOS) bit is not already set on in the CCR of 
the CE. 

An SE accepts an LOS signal when the communications 
bit for the issuing CE is set in the SE’s CCR; otherwise, it is 
ignored. 


LOS from IOCE. Logout stop is automatically issued by an 


IOCE whenever it receives a storage check, provided the 
ILOS bit is not already set on in the CCR of the IOCE and 
an IOCE logout is not in progress. Bit 3 in check register 2 
(SE LOS) in the IOCE is set on to indicate that this IOCE 
stopped the SE; this can be determined from a subsequent 
logout. A pulse ELC is issued to all CEs, and the IOCE 
requests a machine-check interruption in the controlling 
CE. 

The IOCE will also automatically issue a logout stop to 
an SE when the IOCE detects a parity error on data 
fetched, provided the ILOS bit is not already set on in the 
CCR of the IOCE and an IOCE logout is not in progress. 
Upon receipt of the ‘logout stop’ signal, the SE issues a 
level ELC to all CEs in the system. A storage element may 
be issued an LOS signal by any configured CE or IOCE and 
thus be placed in a stopped condition, ready to be logged 
out. However, only a CE configured to communicate with 
the particular SE has the ability to effect the logout and 
restart the SE by issuing the ‘logout complete’ signal. 

Transfer of logout information from the SE’s check 
latches to a designated main storage location is initiated by 
a CE executing a Diagnose instruction that specifies the 
log-out main storage kernel for a designated SE. The SE will 
always log out the complete format. The logout informa- 
tion is placed in main storage in six contiguous double- 
words following the MCW specified by the Diagnose 
instruction that initiated the logout operation. Logout- 
complete is automatically generated at the end of the 
diagnostic logout. 


DE Logout 


e DE must be placed in logout stop status before being 
logged out. 


e DEs logged out by CEs via the Diagnose instruction. 


e Logout data placed in storage at location specified by 
the Diagnose. 


In order to initiate a logout operation for a display element, 
the DE must first be placed in a logout-stop status by a 
‘logout stop’ (LOS) signal from a CE or by the occurrence 
of an address or data parity check condition during a DG 
access while the IDES bit is set off. A DE accepts an LOS 
signal from an issuing CE if its communications bit is set on 
in the DE’s CCR. 


LOS from CE. Logout stop is automatically issued by a CE 
whenever it receives an address check or a data check, 
provided machine-check interruptions are not masked off 
and the inhibit logout stop (ILOS) bit is not set on in the 
CCR of the CE and the CE is not doing a logout. 

A DE accepts an LOS signal when the communications 
bit for the issuing CE is set in the DE’s CCR; otherwise, it is 
ignored. 


LOS from DG Access Parity Check. A logout-stop condi- 
tion is automatically entered into by a DE if the IDES bit is 


off upon occurrence of an address or a data parity check 
condition during a DG access. Upon receipt of an LOS 
signal or upon entering a logout-stop condition because of a 
check condition related to a DG access, the DE issues a 
level ELC to all CEs in the system. The ELC remains until 
the DE receives a ‘logout complete’ signal from a config- 
ured CE. A display element may be issued a ‘logout stop’ 
and be logged out by any configured CE. Upon completion 
of the logout, the DE is restarted via a ‘logout complete’ 
signal. 

The transfer of logout information from a DE to main 
storage is initiated by a CE executing a Diagnose instruction 
that specifies the logout main storage kernel for a desig- 
nated DE. The information is placed in main storage in six 
contiguous doublewords following the maintenance control 
word (MCW) specified by the Diagnose that initiated the 
operation. Logout-complete is automatically generated at 
the end of the diagnose logout. 


Split Logout 


e Split logout may occur if PSA SE becomes unavailable 
during logout. 


e PSBAR is stepped, and logout is restarted in alternate 
SE. 


e Split-logout bit is set in word 42 of CE logout data. 
e Scan address sequence show where logout split. 


e Only CE can do split logout; IOCE cannot. 


Under certain circumstances during a logout (see ‘CE Error 
Handling” in this chapter), when the CE is unable to access 
the SE containing the PSA, a split logout will occur. That 
is, PSBAR is stepped to the alternate PSA SE and the 
logout is restarted. When this occurs, the split logout bit is 
set in check register 2 of the CE. This bit becomes bit 23 of 
logword 42 in the second logout. 

Whenever the split-logout bit is found to be set in word 
42 of the CE logout data, a portion of this data may be in 
the primary PSA. This may be determined by examining 
the contents of the scan address sequencers (bits 8—11 of 
word 43), which are logged in the alternate PSA. If the 
logged address sequencers reference a doubleword number 
less than 23, the number is one less than the logout number 
of the last doubleword of logout information contained in 
the primary PSA. © 

The alternate PSA always contains a complete set of 
current log data because the logout is restarted from the 
beginning. However, log data in those locations down to 
one greater than where the address sequencer points may 
not be identical in the alternate PSA logout. The double- 
word of log data indicated by the address sequencers will be 
found in the ST register logwords in the alternate PSA. 
Note that the ST register is normally stored out of parity at 
the beginning of logout and is corrected at the end of it..On 
a split logout, it is not possible to return to the primary SE 
and correct parity in the ST logword. It is expected that the 
program will allow for this out-of-parity condition when 
analyzing the logout, but maintenance personnel must be 
aware of the condition when examining the logout in core. 

The IOCE cannot perform a split logout since it cannot 
step PSBAR. However, the effect can be obtained by 
programming, as discussed under “IOCE Handling of CLU 
Errors” later in this chapter. 


Sense Command 


e I/O control units have no logout facility. 


e Sense command used in lieu of logout. 


The TCU, RCU, and DAU have no logout facility. Errors 
are reported via the status byte during normal I/O interface 
operation. The Sense command is used in lieu of logout. 
Upon receipt of a Sense command, these units transfer a 
series of bytes of data to the channel. These bytes represent 
the contents of the sense register that contains details of 
the error. This is analogous to an SE or DE logout in which 
error information is transferred to the CE upon request. 


MALFUNCTION HANDLING 


All elements monitor for abnormal conditions including 
internal and external logic checks. CEs handle their own 


9020E Introduction (7/70) 8-5 


abnormal conditions whenever possible. They issue a pulse 
ELC to other CEs, however, to alert them that an abnormal 
condition is being handled. When a CE is unable to 
continue for any reason, it issues a level ELC to all other 
CEs. : 

An IOCE reports abnormal conditions to its controlling 
CE in considerable detail. It can perform a logout, but does 
so only under control of a CE. 

An SE ora DE reports logic checks to the current user 
and reports abnormal conditions to all CEs via ELC. Details 
of the abnormal condition can be obtained only via logout. 
The SE or DE itself cannot perform a logout but must be 
logged out by a CE. 

TCUs, RCUs, and DAUs report logic errors via normal 
channel operation. With some exceptions, abnormal condi- 
tions are reported via ELC, and a Sense command is 
required to obtain details. These exceptions are noted in 
the description of the individual element error handling 
which follows. 


CE Error Handling 


The CE continually monitors for errors that occur within 
its own logic and for errors that result from its operation 
‘with an SE or a DE. For purposes of this discussion, 
external errors that may result from operation with an 
IOCE or another CE (control bus check or read direct 
timeout) are included with errors in the CE’s own logic. In 
addition to error monitoring, the CE monitors for a logout 
request, whether from another CE via Write Direct or from 
depression of the Logout pushbutton. The way the CE 
responds to these conditions is shown in flowchart form in 
Figure 8-2 and is described below. 


Logic Checks 
e Recorded in check registers 1 and 2. 
@ Can be masked off by PSW bit 13. 


Refer to Figure 8-2. When the CE detects an error in its 
internal logic or receives a check from an SE or a DE with 
which it is working, the appropriate bit is set in check 
register 1 or 2. A logout and a machine-check interrupt will 
then occur if machine check-interrupts are not masked off 
in the current PSA (bit 13 on). If they are masked off, a 
level element check (ELC) is issued to all other CEs, and 
the issuing CE attempts to continue processing until a 
change in the mask allows the pending interrupt to occur. 

When the mask permits, a pulse ELC is issued to all 
other CEs, and the CE stops processing in preparation for 
logout. If the error was from storage (and the ILOS bit is 
not on in the CE’s CCR), the CE sends the LOS signal to 
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the SE and sets the LOS bit in check register 2. The CE . 
proceeds with its logout into the PSA, followed by a - 
machine-check interrupt. Normally, the machine-check- 
interrupt handling routine would then recognize the LOS 
bit in the logout, if it had been set, and would use the 
Diagnose instruction to log out the SE. 

It is possible for the SE containing the PSA to be 
logout-stopped. This is detected when CE logout begins. 
PSBAR is then stepped to the alternate PSA. If no alternate 
is found, the ‘PSBAR not configured’ bit is set in check 
register 2, a level ELC is issued, and the CE checkstops. 


CE Handling of SE Access Response Errors 
e Program interruption if SE stopped or not ready. 


@ Machine check interruption if SE not stopped and ready. 


In addition to the error handling discussed so far, the CE 
must be able to handle the condition in which an SE or a 
DE fails to respond to a storage request. In this case, there 
is no data or address check; the SE or DE simply fails to 
respond. Figure 8-3 shows how the CE handles SE access 
response errors. Upon making a storage request to a 
particular SE, the CE checks the ‘SE stopped’ and ‘SE 
ready’ lines from that SE. If the SE is stopped or not ready, 
a program interrupt is indicated, since the program should 
not have attempted to access a stopped or not-ready SE. 
The appropriate interruption code is set into the program 
old PSW. A program interrupt should now occur, therefore, 
the PSA SE must be accessed. A check is made to 
determine whether the original request was to the PSA area. 
If it was not, a request to the PSA SE is forced. If it was, 
the PSA SE is known to be stopped or not ready. In 360 
mode, the CE will checkstop since further operation is 
impossible. In normal operation, however, PSBAR is 
stepped and an access is made to the alternate PSA area. A 
check is first made of the ‘alternate’ latch. If it is already 
on, the original access was to the alternate PSA. In this case 
‘PSBAR alternate check’ is set, a level ELC is issued to all 
other CEs, and the CE checkstops. Normally, the ‘alternate’ 
latch would be found off and would be set at this time. 
PSBAR is then stepped, ILOS permitting. If another 
configured SE is found, a select is forced to it. If no other 
configured SE is found, ‘PSBAR not configured’ is set, a 
level ELC is issued to all other CEs, and the CE checkstops. 
Note that PSBAR is stepped when a machine check 
occurs on an access to any location in the PSA SE, whether 
to the actual PSA or not, but when a program check occurs, 
PSBAR is stepped only on an access to the PSA itself. 
Returning to the beginning of the flowchart in Figure 
8-3, note that, when the SE is not stopped and is ready, a 
select is issued and a nominal 25-ms timedown is entered. 
This timedown actually varies between 16 and 32 ms. 
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Figure 8-2. CE Error Handling 
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Figure 8-3. CE Handling of SE Access Response Errors 


Timeout 
or other 
error 


Stopped or 
Not Ready 


Force a select 
Issue level to PSA SE. 
ELC; ck stop. 


Normally, the ‘accept’ pulse is received from the SE much 
sooner than this, so the time is not critical. However, if the 
SE fails to respond with ‘accept’, a timeout occurs, 
preventing an indefinite hang condition. Note that the ‘SE 
stopped’ and ‘not ready’ conditions are still monitored 
during the timedown. 

In the event of an SE timeout, a pulse ELC is issued to 
all other CEs and a pseudo-accept in generated within the 
CE to allow resetting of the storage-request circuitry. The 
‘SE timeout’ bit is set in check register 2, and preparation is 
made for a logout into the PSA area. If machine checks are 
masked off, the CE attempts to continue processing. In this 
event, the pulse ELC, already issued, alerts other CEs to the 
condition. When machine checks are masked on, though, 
the current instruction is terminated and the same proce- 
dure for locating the PSA area is followed as for the 
program interrupt conditions described previously. How- 
ever, a logout rather than a program interrupt is initiated at 
the end of this procedure. 


CE Handling of DE Access Response Errors 


Figure 8-4 shows the CE’s handling of DE response errors. 
This action is the same as for SEs except that the DE can 
never contain the PSA. Therefore, it is not further 
described here. 


CE Error Monitoring during Logout 
e Most errors ignored during logout. 


e Only errors that could cause incorrect or incomplete 
logout are checked: 
Invalid address 
SE timeout 
SE stopped 
Log ROS check 
Log address check 


Note that the CE continues to monitor for errors during a 
logout. Error handling during logout is different from 
normal error handling. This is shown in Figure 8-5. 

Most errors are ignored during logout. However, certain 
errors that would result in an incorrect or incomplete 
logout must be checked. Figure 8-5 shows that, in the event 
of an ‘invalid address’ or ‘SE timeout’, a check of the 
‘alternate’ latch is made to determine whether the logout is 
already being made into the alternate PSA SE. If so, 
‘PSBAR alternate check’ is set, and the CE issues a level 
ELC and checkstop. If not, PSBAR is stepped, the ILOS bit 
permitting. If another configured SE is found, the ‘split 
logout’ bit is set in check register 2, and a request is made 


to the new SE. If no other :configured SE is found, the 
‘PSBAR not configured’ bit is set in check register 2, a level 
ELC is issued to all other CEs, and the CE checkstops. 

The same procedure is followed upon detection of an 
SE-stopped condition unless the operation is in 360 mode. 
In 360 mode, the CE checkstops immediately upon 
detection of the SE stopped during logout. 

During logout, the CE also monitors for ‘log ROS check’ 
and ‘log address check’, which indicates that a ROS address 
outside the logout routine has been accessed or that log 
data is to be stored outside the PSA area. These checks 
cause the appropriate bit to be set into check register 2. 


Storage data and storage address checks are also monitored 
during logout. The detection of any of these errors causes a 


level ELC to be issued and the CE to checkstop. 


CE Handling of Internal Abnormal Conditions 


e OTC or OBS causes external interruption of the CE in 
which it occurs. 


@ Internal and external logic checks result in ELC to all 
CEs: 
Pulse ELC if machine-checks masked on. 
Level ELC if machine-checks masked off. 


Figure 8-6 shows the way in which the CE handles 
abnormal conditions arising within the CE itself. The four 
consecutive decision blocks, together with the loop back to 
the entry, represent hardware-monitoring of abnormal 
conditions. This diagram is for purposes of explanation 
only and does not imply looping or scanning by the 
hardware. An OTC or OBS arising in the CE sets the ‘CE 
own OTC’ or ‘CE own OBS’ bit, respectively, in DAR. No 
signal is sent to any other CE as it is expected that the CE 
will handle these conditions itself. If external interrupts are 
not masked off in the current PSW, and the DAR Mask 
permits, the CE takes an external interrupt. 

A logic check, internat or external, causes an ELC to be 
sent to all other CEs. If machine-check interrupts are 
masked on, a pulse ELC is sent, and a logout and 
machine-check interrupt ensues. If machine-check inter- 
rupts are masked off, however, the CE attempts to continue 
normal operation. In this case, a level ELC is sent to all CEs 
to alert them to the fact that this CE cannot properly 
handle this condition. Checkstop, power check, or power 
down also causes a level ELC to be sent to all other CEs. 


IOCE Error Handling 


The IOCE continually monitors for errors occurring within 
its own common logic and channels, for errors related to its 
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Figure 8-5. CE Error Monitoring during Logout 
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Figure 8-6. CE Handling of Internal Abnormal Conditions 
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operation with SEs, and for abnormal conditions. The 
manner in which the IOCE handles these errors and 
abnormal conditions is described in the following text. 


IOCE Handling of CLU Errors 


e CLU monitors and logs out: 
1. Itsownerrors. 
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e CLU logout also caused by: 
1. Logout request from CE. 
2. Storage timeout and SE not stopped. 
3. CLU or storage check during selector channel logout. 


e During logout most errors are ignored but IOCE moni- 
tors for errors that would affect validity of logout. 


Figure 8-7 shows the IOCE handling of errors detected 
within the Common Logic Unit (CLU). Errors detected in 
CLU include errors occurring within CLU, storage errors 


9020E Introduction (7/70) 8-15 


reported by an SE with which the IOCE is working, and 
selector channel errors that occur during execution of Test 
Channel instruction. 

A-logout request from a CE is handled in much the same 
way as a CLU error and is also shown in Figure 8-7. The 
‘CE log request’ bit is set in check register 2, and a CLU 
logout is initiated. The logic from that point is the same as 
for CLU errors and is described later. 

Note, also, the entry point representing errors described 
in Figures 8-8 and 8-9. These errors are: (1) a storage 
timeout on a request to an SE which is not stopped and (2) 
a CLU or storage check occurring during a selector channel 
logout. These errors also result in a complete CLU logout. 

When a CLU or storage check occurs, the appropriate bit 
is set in check register 1 or 2 to identify the error. The 
IOCE then checkstops in preparation for logout and issues a 
pulse ELC to all CEs. If the error was a storage check, it is 
desirable to log out the SE as well as the CLU. If the ILOS 
bit is on, the SE is not stopped for logout. However, if 
ILOS is not on, the SE is stopped to preserve its condition 
at the time of the error for subsequent logout by the 
controlling CE. It is also desirable to stop the SE for logout 
when an interface error has occurred, although the logout 
data is not always pertinent. On a fetch, a check is made for 
a full-sum check which would indicate an error in data 
coming into the IOCE; i.e., a fetch data check. If a fetch 
data check has occurred, the SE is stopped for logout, ILOS 
permitting. 

Whether the SE is stopped or not, the IOCE issues the 
‘special machine check interrupt request’ to the controlling 
CE and waits for ‘permit interrupt’ to be returned. This 
machine-check interrupt differs from the normal one, in the 
CE, in that the CE does not perform a logout and honors 
the interrupt only at the end of the current instruction. 
Also, the interrupt results in an interruption code, in the 
MC old PSW, of 1, 2, or 3 to identify the IOCE requesting 
the interrupt. This machine-check interruption is masked 
by PSW bit 13 in the CE. 

When ‘permit interrupt’ is received from the CE, the 
IOCE begins the CLU logout. This includes a logout of 
common channel, the multiplexer channel, and a single 
selector channel if one is operating with the CLU when the 
error is detected. If no selector channel is operating at that 
time, the selector channel logout area contains zeros. 

During logout, CLU errors are degated by the ‘ignore 
error’ trigger, but the IOCE monitors for errors that would 
affect the validity of the logout information. As a result, 
during logout, the following errors cause the IOCE to 
checkstop and issue a level ELC to all CEs: log ROS check, 
log address check, invalid ROS address, storage check, 
storage timeout, and PSA lockout. 

At the completion of the logout, the IOCE stores the old 
machine check PSW in MACH at location 48 (Dec) to 
provide a return for the processor. This is done whether the 
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processor was operating or not. ‘Process Mode’ is then reset 
so that the processor will remain in the stopped state until 
started by a CE. 

Returning to the top of Figure 8-7 observe that a 
selector channel error which occurs during a Test Channel 
instruction also results in a CLU logout. This instruction 
requires only the use of common channel, so errors during 
its execution must result in a complete CLU logout to be 
meaningful. 

Note that certain error conditions indicated by bits set 
into check register 2 do not result in a logout. ‘Control bus 
check’ indicates that incorrect data has been received from 
a CE. When this occurs, the IOCE’s only action is to raise 
the line, ‘check response’, to the CE. The CE then sets the 
‘control bus check’ bit in its own check register 2 and takes 
a machine-check interrupt. 

The bits, ‘SE LOS’ and ‘fetch data check’, also cause no 
IOCE action. They provide valuable information in the 
logout, however. ‘Fetch data check’ is always accompanied 
by a ‘full-sum check’, which does initiate a logout. 

The log checks (‘log ROS’ and ‘log ADDR’) cause a 
checkstop and level ELC since they occur only during 
logout, and no further action is possible with these checks 
present. 

The ‘PSA lockout’ bit is also an exception. It results ina 
program interrupt normally, but, during logout, it causes 
the IOCE to checkstop and issue a level ELC. The logout 
cannot continue because the IOCE is unable to access the 
PSA SE. 

One other exception to the normal error-handling 
scheme is the ‘CCR parity check’ bit. This is explained later 
under “IOCE Handling of Abnormal Conditions”. 


IOCE Handling of SE Access Response Errors 


e Invalid address if ‘request acknowledge’ not received 
within 1 usec. 


e Hardware malfunction if ‘accept’ not received within 16 
usec and SE not stopped. 


e Program error if ‘SE timeout’ occurs for a stopped SE. 


The IOCE is also able to handle the condition in which an 
SE fails to respond to a request for storage access. Handling 
of SE access response errors is shown in Figure 8-8. 

When the IOCE requests a storage cycle, a 1-usec 
timedown is started. The SE normally responds with 
‘request acknowledge’ before 1 usec to indicate that the 
IOCE’s request has been received and that access will be 
granted when the SE priority scheme permits. The IOCE 
then start a 16-usec timedown to wait for ‘accept’ from the 
SE to indicate that access has been granted. 


Figs. 8-8 and 8-9 
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If ‘request acknowledge’ is not received within 1 usec, 
timeout is interpreted as an invalid address condition. That 
is, the request was made to an SE which was not physically 
present, was powered down, or was not configured. This is 
a program error. 

If, during the 16-usec timedown, ‘accept’ is not received, 
the ‘SE stopped’ line is examined. If the SE is not stopped, 
the timeout is interpreted as a hardware malfunction. Since 
the SE did send ‘request acknowledge’ and is not stopped, 
only a malfunction can prevent ‘accept’ from being 
received. In this event, the ‘SE timeout’ bit is set in check 
register 2 and preparation is made for logout as previously 
described. If the access request was made as a result of a 
CLU logout already in progress, no further action is 
possible, and the IOCE checkstops and issues a level ELC to 
all CEs. 

The IOCE cannot do a split logout since it cannot step 
PSBAR. It is expected that the program for the controlling 
CE would handle this condition as a result of the level ELC 
from the IOCE. The program can do a ‘write direct logout’ 
to the IOCE and may supply a new PSBAR, using the Load 
PSBAR instruction. Forcing an IOCE logout to a new 
PSBAR setting has the effect of a split logout. However, 
there is no IOCE hardware involved in this effective split 
logout. 

Still referring to Figure 8-8, note that the condition in 
which the SE is stopped when an ‘SE timeout’ occurs is 
considered a program error. Correct IOCE response to this 
condition, as well as the 1-usec timeout condition, depends 
on the nature of the storage access request being made. The 
remainder of the logic in Figure 8-8 determines what type 
of access was being made and generates the correct 
response. 

This is clearer if it is realized that the IOCE can make a 
storage access request for one of only six reasons: 

CAW fetch 

CSW store 

Logout access 

Initial CCW fetch 

Data transfer cycle 

Processor access 


The first three of these are PSBAR references; i.e., accesses 
to the CE’s PSA area. This should not be confused with 
accesses to the processor’s PSA area, which is always in 
lower MACH and is not a PSBAR reference. 

The first decision block after each of the program-error 
conditions (invalid address and SE stopped) determines 
whether the request is a PSBAR reference. If so, the IOCE 
issues ‘PSA lockout’ to the using CE. This results in a 
program interrupt at the CE. 

As implied previously, a PSBAR reference can only be a 
CAW fetch, a CSW store, or a logout access. If a logout is in 
progress, the IOCE checkstops and issues a level ELC. If 
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not, the access is either a CAW fetch or a CSW store. Which 
of these is the case is determined by checking whether an 
I/O instruction is presently being set up. The setup, or 
initialization, of an I/O instruction is normally completed 
by sending ‘response’ to the CE to release the latter for 
further processing. If an I/O instruction is being setup, the 
request must be a CAW fetch, since’ the only other 
possibility is a CSW store which occurs. after the setup is 
complete. The instruction is terminated, and no response is 
sent to the CE, which causes the CE to set the condition 
code to 3 (unavailable). After terminating the instruction, 
the IOCE returns to the wait loop. 

If no instruction setup is in progress, the request was to 
store a CSW. The interruption is terminated. This interrupt 
is lost and is not recoverable. The ‘PSA lockout’ and 
subsequent CE program interrupt will alert the program to 
this condition. Upon termination of the interruption, the 
IOCE returns to the wait loop. 

A storage access request which is not a PSBAR reference 
must be an initial CCW fetch, a data transfer cycle, or a 
processor access. The correct IOCE responses to these 
conditions depend on whether the access was to an invalid 
address or to a stopped SE. The “no” exit from the 
left-hand decision block, marked ‘“PSBAR reference”, 
represents the case of a request to an invalid address. 

The next decision block determines whether an I/O 
instruction setup is in progress. If so, the request was for 
the initial CCW fetch. Since the CE is waiting for ‘response’, 
the IOCE sets the condition code to 1, stores a CSW with 
the ‘program check’ bit on, and sends ‘response’. The 
‘program check’ (bit 42) in the CSW alerts the program to 
the invalid address condition. The IOCE then returns to the 
wait loop. 

If no I/O instruction is being set up, a check is made to 
determine whether the processor is operating. If it is, a 
program interrupt into MACH is taken to alert the 
processor program. If it is not, the access can only be a 
data-transfer operation for an I/O operation already in 
progress. In this case, an I/O interruption is taken to the 
CE’s PSA area. The ‘program check’ bit is stored in the 
CSW, and the IOCE again returns to the wait loop. 

The remaining case of a request to a stopped SE for a 
non-PSBAR reference is shown at the “no” exit from the 
right-hand decision block, marked ‘“PSBAR reference”. The 
three possible types of access requests are handled here as 
they were for a request to an invalid address, except that 
where a CSW is stored the ‘chaining check’ (bit 47) is set 
on; it is forced on by ‘SE stopped’. 


IOCE Handling of Selector Channel Errors 


e Data checks recorded but operation is continued. 


e For errors other than data checks, operation is suppress- 
ed in preparation for logout. 
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Figure 8-8. IOCE Handling of SE Access Response Errors 


e Contents of using CE’s PSBAR must be obtained to 
effect logout. 


e Error monitoring continues during logout. 


Figure 8-9 shows the handling of selector channel errors by 
the IOCE. Recall that errors occurring during execution of 
a Test Channel instruction are not handled here, but 
instead, are grouped with CLU error handling as previously 
described. 

When an error is detected within a selector channel, it is 
first determined whether it was a data check. If it was, the 
operation is allowed to continue, but the check is recorded, 
parity is corrected in the data, and command chaining is 
suppressed. For errors other than data checks, the opera- 
tion is terminated and the selector channel prepares to log 
out. The contents of the using CE’s PSBAR must be 
available for the logout to proceed. If an I/O instruction 
setup is in progress, the CE is waiting for ‘response’, and 
PSBAR is available on the control bus. In this case, logout 
can proceed immediately. If no I/O instruction is being set 
up, the selector channel must issue an I/O interrupt to 
obtain PSBAR. If selector channel interrupts are not 
masked off, the interrupt is taken when ‘permit I/O 
interrupt’ is received from the CE. With PSBAR available, 
the selector channel proceeds with the logout. 

Error checking continues during the selector channel 
logout. An SE response error causes the IOCE to checkstop 
and issue a level ELC to all CEs. Any storage or CLU error 
results in a complete CLU logout. In this case, a second 
logout of the same selector channel then occurs at the end 
of the CLU logout. The data in the selector channel logout 
area then reflects the channel condition at the time the 


CLU or storage error occurred rather than at the time the 


channel error occurred. 
At the completion of the selector channel logout, the 


IOCE action depends on whether an I/O instruction was 
being initiated when the malfunction occurred. If so, a CSW 
is stored, the condition code is set to 1, and ‘response’ is 
sent to release the CE from the instruction hold. If no I/O 
instruction was being set up, the CE is waiting for 
‘response’ to clear the hold for the I/O interruption used to 
obtain PSBAR. The IOCE sets up a CSW and the 
interruption code in the I/O old PSW. Response is then sent 
to clear the interruption hold. The IOCE now returns to 
processing if it was in process mode or to the wait loop if it 
was not in process mode. 


IOCE Handling of Abnormal Conditions 


e IOCE abnormal conditions (OTC and OBS) recorded in 
CE’s DAR. 


e CCR parity check during SCON results in ‘pulse OBS’ to 
all CEs (IOCE ignores SCON). 


e CCR parity check when no SCON is being received 
results in a logic check (CCR parity-check bit set in 
check register 2). 


Figure 8-10 shows how the JOCE handles abnormal 
conditions. The series of five decision blocks at the left, 
together with the loop back to the beginning, represent the 
hardware abnormal-condition monitoring. The diagram, 
included for purposes of explanation only, does not imply 
actual looping or scanning operation in the hardware. 

Recall that IOCEs report abnormal conditions to CEs via 
two signals: OTC and OBS. There are two corresponding 
bits for each JOCE in the DAR of each CE; both bits on 
together indicate ELC. 

Still referring to Figure 8-10, observe that a temperature 
out of tolerance check (OTC) condition causes a ‘level 
OTC’ signal to be issued to all CEs. An ‘on battery’ signal 
(OBS) causes a level OBS to be issued to all CEs. In both of 
these cases, normal operation continues. 

A CCR parity check is handled as a logic check when it 
occurs spontaneously rather than during a reconfiguration. 
That is, the CCR ‘parity check’ bit is set in check register 2, 
a pulse ELC is issued, and a request for logout is made. 
However, if incorrect data is sent by a CE during a 
reconfiguration, the IOCE issues a ‘pulse OBS’ to all CEs 
and ignores the SCON. The IOCE then continues normal 
operation in the original configuration. The ‘pulse OBS’ 
signal was chosen to differentiate this condition from other 
abnormal conditions. 

A logic check causes a ‘pulse ELC’ to be issued to all 
CEs. Logic-check handling has been previously described. 

The remaining possible abnormal conditions are check- 
stop, power check, and power down. These conditions 
result in a ‘level ELC’ being issued to all CEs. 


SE Error Handling 


e All error conditions result in ELC to all CEs. 


e Logic checks are further identified (i.c., data, address, 
storage) to the using CE or IOCE. 


e An SE logout must be performed to identify errors other 
than logic checks. 


Figure 8-11 shows the action that occurs in an SE when it 
detects an error. An error occurring in its internal logic is 


‘recorded within its error latches. This information becomes 


the contents of logword 5 or 11 upon an SE logout. 
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Figure 8-9. IOCE Handling of Selector Channel Errors 
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Figure 8-11. SE Error Handling 


If the error is a data check, ‘suppress log check’ is 
examined. The ‘suppress log check’ signal is raised by the 
CE or IOCE to suppress indication of an expected data 
check. Therefore, the SE continues normal operation when 
‘suppress log check’ is on. Otherwise, a ‘pulse ELC’ is issued 
to all CEs, and the applicable storage, data, or address 
check is issued to the using element (CE or IOCE). 

Having alerted the system and the using element of the 
error, the SE enters a 2.5-usec timeout to await a possible 
‘logout stop’ (LOS) signal. If LOS is not received within 2.5 
usec, the SE resets the error, and priority scanning is again 
started. 
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If the LOS signal is received before the 2.5-usec timeout, 
the SE issues ‘SE stopped’ to all configured elements and a 
‘level ELC’ to all CEs. It then waits to be logged out. When 
‘logout complete’ is received, the SE drops the ‘level ELC’ 
and returns to normal operation. In the absence of ‘logout 
complete’, the SE also responds to a reset or a reconfigura- 
tion. 

Referring to the smaller flowchart in Figure 8-11, 
observe that the SE responds to abnormal conditions other 
than logic checks; namely, power down or power check, 
temperature out of tolerance check (OTC), ‘on battery’ 
signal (OBS), and CCR parity check. An abnormal power 


condition causes a ‘level ELC’ to be issued to all CEs. The 
remaining conditions result in a ‘pulse ELC’ check to all 
CEs. After issuing the ‘pulse ELC’, the SE returns to normal 
operation. 

All abnormal conditions are reported to the CEs as ELC. 
Only a logic check is accompanied by more specific check 
information (data check, address check, or storage check), 
and this is issued only to the using element. An SE logout 
must be performed to determine the specific cause of an 
ELC for other abnormal conditions. 


DE Error Handling 
e Error conditions result in ELC sent to all CEs. 


e CE related errors are further identified (as address 
checks or data checks) to using CE. 


e DE attempts to continue normal operation for CE 
related errors other than logic check. 


e DE stops for logout when DG related errors occur unless 
IDES bit is set to 1. 


Figure 8-12 shows the action that occurs in a DE when it 
detects an error; an error detected in its logic is recorded in 
the error latches. The information in these latches becomes 
the contents of logword 3, 7, or 10 when the DE is logged 
out. 

After the error latch is set, a ‘pulse ELC’ is issued to all 
CEs. Determination is then made as to whether a CE or a 
DG has priority. If it is the CE, a check is made to 
determine whether the ELC is the only error. If yes, an 
abnormal condition (other than logic check) or a DG- 
related error has occurred. In the former case, the DE 
attempts to continue normal operation. In the latter case, 
an error has been detected in the circuitry of the DG which 
had the previous DE cycle. The operation of that DG is 
being completed during the current cycle while a CE has 
priority. The error is a DG data register parity check, a local 
store parity check, or a DG refresh counter parity check. 
These are handled in the same manner as address checks, 
data checks, or an ELC detected when a DG has priority, as 
follows. 

The ‘inhibit DE stop’ (IDES) bit in the DE’s CCR is 
interrogated. If it is on, the error is reset and normal 
operation is attempted. If it is off, the DE clocks are 
stopped and the DE waits to be logout-stopped by a CE. 
The operation when the ‘logout stop’ (LOS) signal is 
received is the same as when an error occurs on a CE access, 
and is described below. 

Return to the flowchart at the block marked ‘“‘Addr/ 
Data Check” where it has been determined that the CE had 


priority and ELC was not the only error indication. The 
appropriate address or data check is then sent to the using 
CE. The DE clocks are stopped, and a 2.5-usec timedown is 
entered to allow time for the LOS signal to be received 
from a CE. If the LOS signal is not received in this time, the 
error latches are reset and the DE attempts to resume 
normal operation. However, if the LOS signal is received 
the CE issues the ‘DE stopped’ signal to all configured CEs 
and a level ELC to all CEs. The DE remains stopped until 
the ‘logout complete’ signal is received, normally. It will, 
however, respond to a reset or a reconfiguration while it is 
stopped. Upon the completion of logout, the DE drops the 
level ELC and resumes normal operation. 

Note that when the DE clocks are stopped the clocks 
associated with the DGs run to the completion of the data 
transfer unless the error is within the DG circuits. The 
clocks associated with the priority circuits and storage run 
until the current cycle is completed and then stop. The DE 
continually monitors for abnormal conditions as well as 
logic errors. Possible abnormal conditions in the DE are: 

Power down 

Temperature out of tolerance check (OTC) 

‘On battery signal (OBS) 

CCR parity error 

Logic check 

Checkstop 


The right-hand entry in Figure 8-12 represents the detec- 
tion of an abnormal condition by the DE. A power-down 
condition causes a ‘level ELC’ to be issued to all CEs. All 
other conditions result in a pulsed ELC to all CEs, unless 
the DE is stopped. Checkstop causes a ‘level ELC’ for the 
duration of the stopped condition, as was noted previously. 

All abnormal conditions in the DE are reported to the 
CEs as ELC. The CE must perform a logout of the DE to 
determine the specific cause of the ELC. 


TCU Error Handling 
e Logic errors recorded in sense register. 


e Unit check bit set in status register. 


e@ Power checks or CCR parity check results in ELC to all 
CEs. 


e CCR parity check sets bit 5 in sense byte 3. 


e OTC turns on thermal indicator and sets Attention bit in 
status register; no ELC sent. 


Figure 8-13 shows how error conditions are handled by the 
TCU. The left entry represents errors detected by the 
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Figure 8-12. DE Error Handling 
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Figure 8-13. TCU Error Handling 
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On until pority 
is corrected. 


internal logic; these result in an I/O interrupt with unit 
check in the status byte. No logout facility is provided, but 
details of the malfunction are retained in the sense register 
and are made available to the program through the Sense 
command. The right entry represents detection of an 
abnormal condition; possible abnormal conditions are: 

Power check or power down 

CCR parity check 

Temperature out of tolerance check (OTC) 


Because the TCU does not have battery backup, there is no 
‘on battery’ signal (OBS). Abnormal power conditions and 
CCR parity checks result in element check (ELC) being sent 
to all CEs. OTC does not cause an ELC, but, instead, causes 
the attention bit to be set in the status register. 

When the TCU detects a check condition during execu- 
tion of a command (left entry to flowchart), the appro- 
priate bit is set in the sense register to identify the type of 
check. The ‘unit check’ bit is then set in the status register. 
The operation is permitted to continue to completion. At 
this time, ending status is presented to the channel. If it 
does not accept the status, the latter is retained (stacked) 
until such time as the channel accepts it. When it is 
accepted, the status byte containing the ‘unit check’ is 
transferred to the IOCE and the status register is reset. As a 
consequence of receiving the ‘unit check’ in the status byte, 
it is expected that the program will request details of the 
malfunction by issuing a Sense command. In this event, the 
initial selection sequence occurs, the Sense command is 
decoded, and the sense bytes are transferred to the IOCE. If 
the next command is a Test I/O or a No Op, the sense 
information is retained and is still available to the program 
through a subsequent Sense command. However, a 
command representing a new tape operation is received, the 
sense register is reset for use during that operation, 
whereupon the detailed information regarding the malfunc- 
tion is lost. 

The TCU continually monitors for abnormal conditions 
also. This is represented by the right entry to the flowchart. 
A power-check or power-down condition causes a ‘level 
ELC’ to be issued to all CEs. A CCR parity check also 
causes a ‘level ELC’ to be issued to all CEs, but, in addition, 
a bit is set in the sense register (bit 5 of byte 3) so that the 
program may differentiate this condition from abnormal 
power conditions via the Sense command. The ‘sense’ bit 
and the ‘level ELC’ remain until parity is corrected in the 
CCR. 

An overtemperature condition in the TCU gives rise to 
the OTC signal. A pushbutton is also provided to simulate 
the OTC. When OTC is detected, the TCU turns on a visual 
thermal warning indicator and sets the ‘attention’ bit in the 
status register. This ‘attention’ status is presented to the 
channel at the end of the current operation, if one is in 
progress, or during the initial-selection sequence for the 
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next operation. The TCU does not request service from the 
channel to present the ‘attention’ bit only. The latter is 
unique to the OTC condition in the TCU and therefore 
requires no further definition to the program. 

The ‘attention’ status is presented only once for any one 
occurrence of OTC. The thermal warning indicator remains 
on, however, until it is manually reset. An attempt to 
manually reset this indicato: before the overtemperature 
condition has been corrected results in another attention 
interrupt. 


RCU Error Handling 
e Logic errors recorded in sense register. 
e Unit check set in status register. 


@ Operation terminated if error is ‘bus out check’; other- 
wise operation continues. 


e Errors reported by DGs or RKMs set Attenton bit in 
status register if enabled by attention mask register. 


e@ Power check, CCR parity check, and OTC result in ELC 
sent to all CEs; CCR parity check and OTC also set sense 
bits. 


RCU logic error handling is shown in Figure 8-14 (a). Upon 
detection of a logic error, the RCU sets the appropriate bit 
in the sense register and sets the ‘unit check’ bit in the 
status register. The status, containing ‘unit check’, is 
presented to the channel immediately if initial selection is 
in progress. Otherwise, the RCU determines whether the 
current operation is complete. If it is not complete, the 
RCU waits, unless the error is a bus out check, which 
indicates that incorrect data has been received from the 
IOCE and causes the RCU to terminate the operation. 

When the operation is completed, or terminated, the 
RCU sets ‘channel end’ and/or ‘device end’ in the status 
register and presents the status to the channel. Upon 
detecting the ‘unit check’ bit in the status byte, the 
program normally performs a Sense command to determine 
the specific cause of the error. The sense register retains this 
information until a command other than a TIO or No Op is 
performed. 

The bits in sense byte 2 in the RCU are retained until 
the error condition is corrected, regardless of the com- 
mands performed subsequent to the error. These are: CCR 
Program Check (bit 3, byte 2); CCR Parity Check (bit 6, 
byte 2); and OTC (bit 7, byte 2). CCR Program Check 
indicates that more than one IOCE bit has been set into the 
RCU’s CCR by a SCON instruction. CCR Parity Check and 
OTC are discussed subsequently. 


RCU detects 
logic error. 


Set appropriate bit 
in Sense Register. 


CCR Program Check sets | 
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Figure 8-14. RCU Error Handling 
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The error handling discussed so far is essentially normal 
1/O error handling. In addition to this, the RCU must 
report to the channel errors detected within an RKM or 
DG. Figure 8-14 (b) shows this action. An error line is 
available to the RCU from each RKM and DG. The RCU 
continually scans these lines for an error condition. When 
one of the error lines rises, the RCU attempts to generate 
an attention interrupt to report the error to the channel. 
Note that DAUs do not report errors via an RCU-generated 
attention interrupt. The RCU does not scan the DAUs for 
errors as it does RKMs and DGs. 

Upon detecting an active error line from an RKM or DG, 
the RCU determines whether attention interrupts are 
enabled by the attention mask register. This is a 17-bit 
register that contains a mask bit for each RKM and DG. If 
the bit that corresponds to the device reporting the error 
has been set to a 1 by the program, the RCU is permitted to 
generate an attention interrupt. 

When the RCU is not busy with another operation 
(other than a TIO for the device reporting the error), it sets 
the ‘attention’ bit in the status register and raises ‘request 
in’ to the channel. The request is made using the address of 
the device reporting the error. When the channel responds, 
the status is sent and the ‘attention’ bit, together with the 
device address, alerts the program to the error condition. 

Abnormal conditions, other than those described so far, 
are handled as shown in Figure 8-15. The flowchart shows 
the continual monitoring for abnormal conditions as a loop. 
However, this does not imply hardware scanning on the 
part of the RCU. 

Possible abnormal conditions arising in the RCU are: 
power check (or power down), CCR parity check, and 
temperature out of tolerance check (OTC). An abnormal 
power condition causes a level ELC to be issued to all CEs. 
A CCR parity check also causes a level ELC to be issued to 
all CEs, but, in addition, bit 6 of sense byte 2 is set to 
enable the program to differentiate between the two 
conditions. This sense bit remains set until the parity error 
is corrected. 

OTC causes a ‘pulse ELC’ to be issued to all CEs and sets 
bit 7 of sense byte 2. In addition, a Thermal Check 
indicator, on the RCU maintenance panel, is turned on. The 
sense bit and the indicator remain on until the condition is 
corrected. Depressing the Thermal Reset pushbutton has no 
effect unless the overtemperature condition has been 
corrected. No additional ‘pulse ELC’ is sent when the 
Thermal Reset pushbutton is depressed. 

A Test OTC pushbutton is provided to simulate an OTC 
condition. This pushbutton does not turn on the Thermal 
Check indicator. Bit 7 is set in sense byte 2 but remains set 
only as long as the pushbutton is held depressed. A pulse 
ELC is issued to all CEs when the Test OTC pushbutton is 
depressed. 
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DAU Error Handling 
e@ Logic errors recorded in sense register. 
e Unit check set in status register. 


e Errors in received configuration data signaled to CC by 
withholding ‘accept’. 


Figure 8-16 shows the DAU error-handling operation when 
an error is detected in either the transmission interface 
converter (XIC) or the modified parallel data adapter 
(MPDA). Upon detecting an error, the DAU determines 
whether it was an error in received configuration data, 
which is data received from an RCU that is performing a 
Write Configuration to the DAU. If this is the case, the 
DAU signals the error to the RCU by withholding ‘accept’. 
It then continues operating in the original configuration. As 
a result of failing to receive ‘accept’ on a Write Configura- 
tion, the RCU sets ‘data check’ in its sense register and ‘unit 
check’ in the status. 


This is the only error condition in the DAU that is 
reported to an RCU. For all other errors in the DAU, the 
RCU appears transparent to the channel. Error information 
is passed through the RCU as status and sense information. 
No attention interrupts are generated by the RCU for the 
DAU. 


If the error is not a configuration error, the appropriate 
bit is set in the sense register and the ‘unit check’ bit is set 
in the status register. If initial selection is taking place, the 
status byte is presented to the channel. The XIC checks for 
errors during initial selection only. The MPDA checks for 
errors during data transfers. If an error is detected during 
data-transfer cycles, the current command is allowed to 
finish unless the error is a timeout. Timeout causes the 
operation to be terminated. 


When the operation is completed or terminated, ‘channel 
end’ and/or ‘device end’ are set and status is presented to 
the channel. When the channel accepts the status, the status 
byte is transferred and the status register is reset. 


It is expected that the program will issue a Sense 
command as a consequence of the ‘unit check’ in the status 
byte. If the next command is a Sense, the sense data is 
transferred to the IOCE. If the next command is not a 
Sense, but a Test I/O or a No Op which does not require 
the use of the sense register the sense data is retained for a 
possible subsequent Sense command. Any other command 
causes the sense register to be reset, and the detailed 
information about the malfunction is lost. 
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Figure 8-15. RCU Abnormal Condition Handling 
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Figure 8-16. DAU Error-Handling 
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System initialization involves resets, initial program load 
(IPL), and PSW restarting. Resets establish (or re-establish), 
within the hardware of the elements in which they occur, 
hardware initial conditions. IPL is the process of reading a 
program into storage from an external source. Since there 
may be no operable program in storage at the time, this 
process is necessarily hardware- and ROS-controlled. A 
reset precedes the IPL automatically so that the program, 
once loaded, may safely assume initial conditions. Once a 
program is loaded into storage and has been partially 
executed, it is possible to restart from initial conditions 
again via the PSW restart facility. PSW restart is also 
preceded by a reset. It causes a PSW to be loaded from 
location zero of the SE in ATR slot one. The program must 
have previously placed the proper PSW in this location 
before PSW restart can be successfully used. 

Since these initialization activities usually involve the 
coordinated operation of a number of elements, they are 
described at the system level in this manual. 


RESETS 
e System reset. 
e@ Subsystem reset. 


Two major types of resets occur in the 9020E system: 
system reset and subsystem reset. These resets are initiated 
in one element and propagated to other elements until the 
entire system or a subsystem is reset. Other resets (such as 
power-on reset in an element or selective reset to an I/O 
channel) are not propagated in this way. These are 
described in the individual element manuals. 


System Reset 


@ Resets all elements not in state zero and test. 


e Resets all CCR bits except SCON bits which are set to all 
ones. 


e Resets all channels and I/O devices. 
A system reset is initiated in two ways: (1) during a system 


IPL and (2) during a system PSW restart. Initiation of a 
system reset via PSW restart or IPL from a CE console is 
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blocked if, at the configuration console, the INTERLOCK 
key is on and that CE is selected by the CE SELECT 
switch. 

A system reset causes all system components not in state 
zero (with the Test switch on) to immediately terminate 
their current operation and to go into a reset state. In this 
state, the only communication a system element will accept 
is a configuration mask from any CE or a signal associated 
with an IPL operation. All control circuitry is reset in each 
system element upon receipt of a system reset. The 
configuration control register (CCR) in each element is set 
to all zeros with the exception of the scon bits, which are 
set to all ones (Figure 9-1). . 

System reset to the IOCE causes an IOCE reset. This 
reset causes the channel to terminate operations on all 
subchannels. Status information and interruption condi- 
tions in the subchannels are reset, and all operational 
subchannels are placed in the available state. The channel 
sends the reset signal to all I/O devices attached to it: 

Note than an IOCE reset also occurs when an IOCE in 
diagnose mode (no CE communications bit on) and state 
zero or one is reconfigured to a CE. Note also that turning 
power on in any element initiates a power-on reset which is 
a system reset in that element only. This system reset is not 
propagated to any other element. 


Subsystem Reset 


e Resets only elements configured to issuing CE. 
e Does not affect CCR or ATR in any element. 


A subsystem reset occurs when the system reset, subsystem 
IPL, or subsystem PSW restart facility is used at the CE 
console or when subsystem IPL is initiated from the 
configuration console. A ‘subsystem reset’ signal is accepted 
only by those system elements that are configured into the 
subsystem of the issuing CE. An IOCE reset is performed as 
in a system reset. Any configurable I/O control units must 
be configured to an IOCE controlled by the issuing CE to 
receive the reset. A nonconfigurable I/O control unit 
switched to an IOCE will accept the reset. The subsystem 
reset does not affect the contents of the CCR or ATR in 
any element. The system elements involved immediately 
terminate their current operations and reset their control 
circuitry. SEs and DEs are issued a ‘logout complete’ signal 
to release them from a possible logout-stopped state (Figure 
9-2). 
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Figure 9-1. IBM 9020E System Reset 
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Figure 9-2. IBM 9020E Subsystem Reset 
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Legend: 


*CCR SCON bits reset to ones. All other bits reset to zero. 
**MS SELECT switch contents gated into position 1; all other 
ATR bits reset. 


*PSBAR is set to reference the lowest block within the SE 
whose value is contained in the CE's MS SELECT switch. 


INITIAL PROGRAM LOAD (IPL) 

e Performed by hardware. 

e Two types of normal IPL: system, subsytem. 
e Reset precedes program loading. 


Two types of normal IPL exist in the 9020E, system IPL 
and subsystem IPL. The two are alike in that the CE chosen 
to initiate the IPL raises the line ‘IPL IOCE X’ to the IOCE 
selected by the load unit switches. 

The two types of IPL differ principally in the following 
way. In a system IPL, the CE generates, by hardware, a 
SCON and a SATR to force a configured system capable of 
the IPL. In a subsystem IPL, only the SATR is generated. 


System IPL 
e Initiated from CE or CC. 
e Must have interlock key on. 


e All elements not in state zero and test are forced to state 
three. 


Figures 9-3 and 9-5 show in flowchart form the actions of 
the CE, IOCE, and SE during a system IPL. The upper 
portion of Figure 9-3 shows, in simplified form, the 
intercommunication between system elements during IPL 
and provides a summary of the more detailed portion of the 
flowchart. IPL can be initiated either from the configura- 
tion console (CC) or a computing element (CE) with the 
CE, SE, unit and channel select switches, and the system 
interlock key properly set up (Figure 9-3). The selected CE 
issues a system reset to all elements, turning on all SCON 
bits. It then takes the information from the CC or its own 
load unit select switches to configure a subsystem. The CE 
places the selected SE number in its own ATR position one 
and physical PSBAR, issues a special IPL SCON (pseudo- 
SCON) to each of the selected elements, issues a SATR to 
the selected IOCE (Figure 9-5), and then raises ‘IPL IOCE 
(X)’ to the IOCE. 

Still referring to Figure 9-5, the IOCE reads 24 bytes 
into the PSA area in the selected SE, starting at location 
zero, as follows: 

Location 0: IPL PSW 0 is read in. This is the first data 
that will be fetched by the CE. It includes the starting 
address of the program being read in by the IOCE. 

Location 8: CCW | is read in. This is the first CCW to be 
fetched by the IOCE. It specifies the location to which 
and the number of bytes that the IOCE will read in. It 
may or may not specify chaining to CCW 2. 


Location 10 (hex): IPL CCW 2 is read in. This CCW may 
be a transfer in channel (TIC) to another CCW or a data 
address and byte count, with or without chaining 
specified. 


Having read these three doublewords into the PSA, the 
IOCE fetches from location 8 and executes IPL CCW 1. 
Then a bootstrap-type operation may be performed in 
which IPL CCW 1 may cause further CCWs to be read into 
storage from the input device and chain to IPL CCW 2. 
CCW 2 will then specify a TIC to one of the CCWs just read 
in. The IOCE continues fetching and executing CCWs until 
one which specifies neither TIC nor chaining is fetched. It 
executes this CCW and then raises ‘response’ to the CE. 
This releases the CE to fetch IPL PSW 0 and start executing 
the program read in by the IOCE. 

Figure 9-5 shows the detailed actions of the IOCE in any 
IPL operation including a normal IPL initiated by an IOCE 
in diagnose mode. 


Subsystem IPL 


A subsystem IPL can be initiated from the CC or a CE with 
the subsystem manually configured; the CE, SE, unit and 
channel select switches, and the system interlock key set 
(Figures 94 and 9-5). The selected CE issues a subsystem 
reset to the elements selected and issues a SATR and then 
an IPL to the selected IOCE. All subsequent actions are the 
same in a subsystem IPL as in a system IPL. 


PSW RESTART 

e@ Two types: system and subsystem. 
e Initiated from CE. 

e Preceded by reset. 


@ Loads a PSW from location zero of SE identified in ATR 
slot 1. 


A PSW restart may be initiated at a CE. A system PSW 
restart occurs if the interlock key is turned on; a subsystem 
PSW restart occurs if the interlock key is turned off. 

Figure 9-3 shows the system PSW restart action at the 
CE (as well as IPL which was described previously). The 
system PSW restart is the same as system IPL until 
completion of the Reset, SCON, and SATR routines. 
System PSW restart then branches to the ROS routine to 
load a PSW from location zero of the SE identified in slot | 
of the ATR. A subsystem PSW restart (Figure 9-4) performs 
neither SCON nor SATR. A subsystem reset occurs, and the 
branch is taken to load a PSW. 
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Summary of System Operations: IPL or PSW Restart 4 
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Figure 9-3. System Operations, IPL or PSW Routine 
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STORAGE SELECT switch, 
@ Signal origin 
© Signal destination 


COMPUTING ELEMENT 


Set STAT G, 


1 STAT G and the 'timing gate' 
trigger develop SCON. 


STAT A and the 'timing gate' 
trigger develop SATR, STAT G 


overrides STAT A when both are on, 


CE entry to the stop loop 
(Diagram 6-4 in 7201-02 CE 

-FEMD-M, Stop Loop Routine)... 
Begin ROS control. 


QY041 ,B88 


Branch from the 
stop loop, 


QY061,B90 
Put all 1's into | All elements not in test will be 
Select register, ~ I selected to receive SCON, 


W QY061,B94 


From own CCR gate Sample Configuration Mask: 


Configuration Mask into | 
ST for SE; into External | 
register (on Control Bus) | 
for other elements, | 
| 
| 
| 


Mask 


'SCON Select IOCE (X)'. 
"Reconfigure Sel SE (X)' 
‘Sel+Response TAU (X)' * 
"Reconfigure Sel CE (X)' 
Sel +Response PAM (X)! * 
"Sel +Response RCU (X)' 


KX091 QY061,B94 
Issue SCON, Configure 


minimum subsystem per 
MAIN STORAGE SELECT 
and LOAD UNIT switches 


ANY SYSTEM ELEMENT 
(Not in test and having 
issuing CE's SCON bit 
on) 


(Configuration Mask), 
Send the same Configura- 
tion Mask to all Elements. 


Z 


Receive Configuration 
Mask and SCON Select. 
Set Mask into own CCR, 
Return Response, 

(Hardware functions.) 


SCON Response 
Ignore response. —-—— — 


—~ 


Common Routine: 
IPL or PSW Restart, 


Legend: 
* True multiplex lines, 
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Functions 
performed by 


ae ces 


Subsystem Reset 


SATR 


PF | sate 
O 
SATR 


(IPL only) ¥ 


Sea 


Summary of Subsystem Operations: IPL or PSW Restart. 


CONFIGURATION CONSOLE 


'CE Sel (X)! 
‘Load Store Sel (X)' 
MAIN STORAGE SELECT switch set. — — — 
LOAD UNIT switches set. 
SYSTEM INTERLOCK key on. Load Unit Sel (X) 


COMPUTING ELEMENT 


MAIN STORAGE SELECT switch set. 
LOAD UNIT select switches set. 
SYSTEM INTERLOCK key off. 
LOAD pushbutton depressed, 


CE performs 
IPL function 
for CC using 
CC inputs. 


KW005 


KW401 


1000-usec 
subsystem reser, 


"Subsystem Reset' 


IOCE 


(Configured to 
the issuing CE) 


(Configured to 
the issuing CE) 


Machine reset, 
Propagate reset 
to configured I/O. 


Figure 9-4. Subsystem Operation, IPL or PSW Routine 


Set 2500-usec reset 
SS. (Allow time for 
IOCE to reset.) 


Reset own DAR 
Mask and PSBAR, 


Set STAT A, 


Force ROSAR to 003, 


Enable IPL-PSW branch. 


QY041, B88 


Branch from stop loop. 


Common Routine: 
IPL or PSW Restart, 


COMPUTING ELEMENT 


Reset any other system element 
configured to the issuing CE, 


Reset any 1 ‘O configured to or 
switched to this IOCE, 


—— oe eee =n 


Legend: 
m CE which is selected by CC if IPL is initiated 
at the CC, 
CE at which IPL or PSW Restart is initiated. 
& IOCE and TCU selected by CC or CE 
LOAD UNIT switches and SE selected by 
CC or CE MAIN STORAGE SELECT switch, 
@ Signal origin 
© Signal destination 


Stat A and 'timing gate’ trigger 
develop SATR. 


CE entry to the stop loop 
| (Diagram 6-4 in 7201-02 CE 
FEMDM, Stop Loop Routine) 
Begin ROS control. 
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COMPUTING ELEMENT 
System Operation: Subsystem Operation: 
IPL or - PSW Restart, IPL or PSW Restart, 
QY061 ,B99 


Set STAT D for 
IPL branching. 


QY061 ,B99 CE FEMDM. 
Yes 
| 
| 


No Diagram 5-60] 


Diagram in 7201-02 


Q021 E te Load 
— SEW Routine I/O CONTROL ELEMENT 
Set IOCE bit in outine 
select register, (Load PSW from 
location 0) 
KX132 QQ021,A48 
ISATR Select IOCE (X)! 
Issue Ist SATR. _— ———— — — — —— — - -- > » 


and configured 
to issuing 


CE 


Yes 


QV118,049 


FS531 SIOAN GAO? = ons 9 SSCON Response” > ot toh tae Sky =< ROAR is forced to 048 
, Return response, 


QV118,404 


Receive 
2nd SATR before 


timeout 


No 


Yes Go to halt loop. 
QV118, 403 


KX132 QQ021,AC2 
"SATR Select IOCE (X)' 


No 
Yes 
QQ021,A48 
Set ATR | bits in 
external register. 


Set IOCE bit in — 


When 2nd SATR falls, 
select reg. 


check parity of data 


tssue-2nd-SATR,- - ~ for ATR 1, 


QQ021,A8C 


Set ATR 2 bits in 
external register, 


QV118,434 


Receive 


No 
KX132 QQ031, A8E 3rd SATR before 
'SATR Select IOCE (X)' s timeout 
Issue 3rd SATR, an = 
Yes Go to halt loop. 
' QV118,434 
FS531 QQ031,AC4 "SCON Response "4 I AT 
: -_oe oe Ce err re Tr re eC eck parity of date 
Response ie for ATR 2, Load 
before timeout £ — ATR 1 and 2, 
eturn response, 
QY061,B9A a 
Yes Hang: B9A, 
Normal breakout, 
KS03) QY061,B9D Return to the halt 


loop. 
Set STAT B, | Stat Band the ‘timing gate’ trigger oer 


Set IOCE bit in develop IPL. 
the select register. (Halt loop) 


KX129 QY061 ,B9F NPL IOCE (X)! 


Set unit channel 
and PSBA bits in 


external reg (on the 
Control Bus) and 
issue IPL, 


QK207,84D 
QK800 ,B99 


eS Set Contro! Bus bits 
into PSBAR, 
Sheet 2 


QK800 ,62A 


Set up CCWs from 
Contro! Bus data, Take 
PSBAR to SAR, 


QK800,B19 


Issue IPL SIO and 
TIO to channel. 


Sheet 2 


Figure 9-5. Common Routine: IPL or PSW Restart (Sheet 1 of 2) 
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STORAGE ELEMENT 


Sheet 1 


p-----------~<<-- 


IPL PSW O 


IPL CCW 1 
IPL CCW 2 le l 


CCWs and/or 


program 


<< >—= 
l 
I 
VY 
Y 
l 


COMPUTING 
ELEMENT 


KX16] QY061,BA0 Response’ 


——-—<€-— 


Response 
before 


Diagram 5-601 


Execute Load : 
PSW Routine. 


Legend: Heavy dashed lines indicate data flow, 


Diagram in 7201-02 
CE FEMDM. 


Figure 9-5. Conimon Routine: IPL or PSW Restart (Sheet 2 of 2) 


| 


I/O CONTROL ELEMENT 


Sheet 1} 


Force hardware 
IPL CCW into 
channel registers 
and execute, 


Fetch and 

execute IPL 
CCW 1 from 
location 8, 


CCW 1 


specifies 


Fetch and execute 
IPL CCW 2 from 
PSA loc 10 (hex). 


CCW 2 
specifies 
TIC 


Fetch and execute 
the CCW at the 
specified address. 


Continue fetching and 
executing CCWs until one 
is fetched which specifies 
neither TIC nor chaining. 


QK908 , B8F 


Test channel status. 


QK801 , BOF 


Prepare unit and channel 
addresses for the inter- 


ruption code in PSW 0, 


QU801 ,BBC 


Store unit and channel 
addresses in PSW 0, 


BBO47 QU801,BCD 


Send response 
to the CE, 


QT200 


Return to the 
halt loop, 


No 


; From input unit store IPL PSW 0, IPL 
1 CCW 1 and IPL CCW 2 (total of 24 
' bytes) into the PSA, 


oF Store N bytes starting at location Xo 
"(N and Xo are specified by IPL CCW 1), 


CCW 2 
specifies 
chaining 


Fetch and execute CCW 
3 from PSA location 18 

(hex), Xo equals 18 in 
this instance. 


The listing in the Type and Exceptions columns are defined as follows: 


A Addressing exception 

Cc Condition code is set 

D Data exception 

DF Decimal-overfiow exception 
DK Decimal-divide exception 

E Exponent-overflow exception 
EX Execute exception 

F Floating-point feature 

FK Floating-point divide exception 
lF Fixed-point overflow exception 
1K Fixed-point divide exception 


L New condition code loaded 

LS Significance exception 

M Privileged-operation exception 
P Protection exception 

BS) Specification exception 

T Decimal feature 

U Exponent-underflow exception 
Y Direct control feature 

Zz Protection feature 


NOTE: Blank space indicates instruction not valid for unit 


indicated. 
Name Mnemonic Format Type 


Add 

Add 

Add Decimal 

Add Halfword . 

Add Logical 

Add Logical 

Add Normalized 
(Long) 

Add Normalized 
(Long) 

Add Normalized 
(Short) 

Add Normalized 
(Short) 

Add Unnormalized 
(Long) 

Add Unnormalized 
(Long) 

Add Unnormalized 
(Short) 

Add Unnormalized 
(Short) 

AND 

AND 

AND 

AND 

Branch and Link 

Branch and Link 

Branch on 
Condition 

Branch on 
Condition 


APPENDIX A. COMPARATIVE INSTRUCTION LISTING 


Exceptions Code 
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360 Mode 


Name Mnemonic Format Type Exceptions Code 


Branch on Count 

Branch on Count 

Branch on Index 
High 

Branch on Index 
Low or Equal 

Compare 

Compare 

Compare Decimal 

Compare Halfword 

Compare Logical 

Compare Logical 

Compare Logical 

Compare Logical 

Compare (Long) 

Compare (Long) 

Compare (Short) 

Compare (Short) 

Convert and 
Sort Symbols 

Convert to Binary 

Convert to Decimal 

Convert Weather 
Lines 

Delay 

Diagnose 

Divide 

Divide 

Divide Decimal 

Divide (Long) 

Divide (Long) 

Divide (Short) 

Divide (Short) 

Edit 

Edit and Mark 

Exclusive OR 

Exclusive OR 

Exclusive OR 

Exclusive OR 

Execute 

Halt t/O 

Halve (Long) 

Halve (Short) 

Insert Adr Tsltr 

Insert Character 

Insert Storage Key 

Load 

Load 

Load Address 

Load and Test 

Load and Test 
(Long) 

Load and Test 
(Short) 

Load Chain 

Load Complement 

Load Complement 
(Long) 

Load Complement 
(Short) 


gaagagaagaagaanangngaanagnga 


NANnNnNANNNANAN 


oCuccccg 
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Name Mnemonic Format Type Exceptions Code 


Load Data Address 

Load Halfword 

Load Identity 

Load (Long) 

Load (Long) 

Load Multiple 

Load Negative 

Load Negative 
(Long) 

Load Negative 
(Short) 

Load Positive 

Load Positive 
(Long) 

Load Positive 
(Short) 

Load PSBA 

Load PSW 

Load (Short) 

Load (Short) 

Move 

Move 

Move Numerics 

Move with Offset 

Move Word 

Move Zones 

Multiply 

Multiply 

Multiply Decimal 

Multiply Halfword 

Multiply (Long) 

Multiply (Long) 

Multiply (Short) 

Multiply (Short) 

OR 

OR 

OR 

OR 

Pack 

Read Direct 

Repack Symbols 

Set Adr Tsltr 

Set Configuration 

Set PCI 

Set Program Mask 

Set Storage Key 

Set System Mask 

Shift Left Double 

Shift Left Double 
Logical 

Shift Left Single 

Shift Left Single 
Logical 

Shift Right Double 

Shift Right Double 
Logical 

Shift Right Single 

Shift Right Single 
Logical 

Start 1/O 


| | 360 Mode 


ANNANNnNnHnHAAN n 


” 


rPrP>PPYr>D 
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Name Mnemonic Format Type Exceptions Code 


|_| 360 Mode 


Start |/O Processor 

Store 

Store Character 

Store Halfword 

Store (Long) 

Store Multiple 

Store PSBA 

Store (Short) 

Subtract 

Subtract 

Subtract Decimal 

Subtract Halfword 

Subtract Logical 

Subtract Logical 

Subtract Norm- 
alized (Long) 

Subtract Norm- 
alized (Long) 

Subtract Norm- 
alized (Short) 

Subtract Norm- 
alized (Short) 

Subtract Unnorm- 
alized (Long) 

Subtract Unnorm- 
alized (Long) 

Subtract Unnorm- 
alized (Short) 

Subtract Unnorm- 
alized (Short) 

Supervisor Call 

Test and Set 

Test Channel 

Test |/O 

Test Under Mask 

Translate , 

Translate and Test 

Unpack 

Write Direct 

Zero and Add 


PrPrPrPrypy? 
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System/360 programs may be run on a simplex subsystem 
of the 9020E through use of the 360 mode capability. 
Placing the subsystem in 360 mode inhibits certain 9020 
actions that are not compatible with IBM System/360 
architecture (as defined in IBM System/360 Principles of 
Operation). This appendix indicates the effects of 360 
mode operation upon the 9020 hardware. For details 
regarding the effects on program operation, refer to 
Appendix G of the IBM 9020D/E Principles of Operation. 


OPERATIONAL CHARACTERISTICS 


The simplex subsystem must use IOCE 1 because the I/O 
channel addresses available on IOCE 1 correspond to IBM 
System/360 architecture. Other elements used in the 
subsystem include: any one CE, any SEs, the console, I/O 
attached to the console, and tapes attached to IOCE 1. 

The subsystem must be properly configured before it is 
placed in 360 mode. It is placed in this mode by depressing 
the 360 MODE pushbutton on the CE control panel. The 
pushbutton is backlighted when 360 mode is active. The 
subsystem may be taken out of 360 mode by again 
depressing the 360 MODE pushbutton. The following 
actions also reset 360 mode: 

1. Power on reset in the CE. 
2. External start to the CE. 
3. State two or state three. 


Note: System IPL and system PSW restart reset 360 mode 
because they force state three. 


HARDWARE DIFFERENCES 


1. The subsystem operates as if ILOS [CCR(6) in CE and 
IOCE] were set to one; i.e., PSBAR stepping is inhibited 
and logout stop (LOS) cannot be sent to an SE. 

2. PSBAR is set as follows: logical PSBAR is reset to zeros 
and physical PSBAR is set to the value in ATR 1 slot 1. 

3. PSA lockout and SE stopped result in a checkstop 
condition; no interruption is caused. 


APPENDIX B. SYSTEM/360 MODE OF OPERATION 


4. Certain 9020 mode op codes become invalid. See Figure 
B-1 for a list of these codes. 

5. Bits 16—19 of the PSW are interpreted as part of the 
interruption code rather than as an extension of the 
system mask. Note that this affects three status-switch- 
ing instructions: LPSW, SSM, and SVC. 

6. Multiplex channel O and selector channels 1, 2, and 3 
become the only operational channels. JOCE 2 channels 
become “not operational’; IOCE 3 channels become 
“invalid’’. 

7. Storage protection operates differently. In 9020 mode, a 
protection key or a storage key equal to zero is 
equivalent to a key match; in 360 mode, only the 
protection key equal to zero is equivalent to a key 
match. 

8. IOCE -processor is hardware-stopped in IOCE 1 when it 
is part of a 360 mode subsystem. 

9. System IPL and system PSW restart cannot be used 
because it forces state three, which resets 360 mode. 


Note: The Direct Control feature of the 9020 has expanded 
capabilities not normally present in System/360 architec- 
ture. These additional capabilities are not disabled in 360 
mode, however; direct control operates the same way in 
both 9020 and 360 modes. 


Set Configuration 
Convert and Sort Symbols 
Convert Weather Lines 
Delay 

Load Identity 


Set Address Translator 
Insert Address Translator 
Repack Symbols 

Load Chain 

Start 1/O Processor 

Set PCI 

Store PS Base Address 
Load PS Base Address 
Move Word 


Figure B-1. Op Codes Not Executable in 360 Mode 


9020E Introduction (7/70) B-1 


ABO. Address bus out 

ACTIVATE. A pushbutton which causes an operation to be 
initiated (such as the changing of a configuration control 
register SCON bits). 

Adapter. The distinguishable hardware that provides the 
controls and signals to control a specific input/output 
device. 

Address Keys. Keys that enable the addressing, by byte or 
word, of any addressable location in main or local storage. 
These keys also serve as a final loop address. 


AR. Address Register 


Backup. An alternative or fall-back position, used mainly in 
conjunction with the power system. 


Battery Power. A temporary backup power system for CEs, 
IOCEs, DEs and SEs, automatically available when main 
line power fails. 

BSM. Basic Storage Module 

BP. Buffer Processor adapter 

Burst Mode. The mode of operation in which all channel 
facilities are monopolized during data transfer to or from a 


particular I/O device. 


Bus. A set of common lines over which data and/or controls 
can be transmitted. 


Busy. A device status (condition code 2); indicates that 
device is active. 


Byte. A group of eight bits. 

CAW. Channel Address Word 

CB. Circuit Breaker 

CC. Configuration Console/Condition Code 

CCC. Central Computer Complex portion of NAS 


CCR. Configuration Control Register 


9020 SYSTEM GLOSSARY 


CCW. Channel Control Word 
CD. Common Digitizer adapter 
CE. Computing Element 


CE Battery Frame. Part of the main wall section between 
two SEs or DEs. Provides battery packs and associated CE 
hardware (contained on the wall). Interframe cabling is 
routed through this frame. 


CE CHECK CONTROL Switch. A switch used for mainten- 
ance purpose; it has three positions: STOP, DISABLE, and 
PROCESS. When a CE check occurs, the setting of this 
switch controls the subsequent activity. PROCESS is the 
normal position. 


Channel. (Associated with an IOCE) the avenue through 
which data flows, to or from the system. 


Channel Address Word. A word in preferential storage 
address 72 which contains the storage protection key and 
storage location of the channel command word. 


Channel Command Word. A word in storage that specifies 
to the channel the I/O command to be executed. 


Channel Status Word. A word in preferential storage 
address 64 which provides the status of an I/O device or the 
conditions under which the I/O operation has been termin- 


ated. 


Character. A group of bits that varies in length between 
four and eight bits, depending on source and use. 


Character Vector Generator. An adapter (Government 
Furnished Equipment), which interfaces the PVD and is 
contained in the DG. 

CLU. Common Logic Unit (a major portion of IOCE). 

CM. Configuration Mask 


Command. The first byte of the CCW; decoded by channel 
and I/O unit to specify I/O operation to be executed. 


Common Logic Unit. The registers, latches, storage, and 
controls that make up the heart of each IOCE. 
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Computing Element. The processor of the 9020 system, 
which maintains system control and performs arithmetic 
and logic operations. 


Configuration Console. A unit in the 9020E which provides 
a central monitoring and control position for the system. 
Reconfiguration and error reporting paths for the IBM 
DAUs, DGs and RKMs are provided by duplexed reconfig- 
uration control units contained in the CC. The CC also 
interfaces the SMMC for error reporting. 


Configuration Control. A hardware- and program-controlled 
system which defines system and subsystem communica- 
tion paths and protects the operational system from 
malfunctioning system components assigned to a mainten- 
ance subsystem. 

Configuration Control Register. A register in each system 
element and control unit, except the 2821 SC and 2701 
DAU, which controls communication between system 


components. 


Configuration Mask. The data used by the configuration 
control registers. 


Console. An aggregation of indicators and controls. 


Control Panel. Used interchangeably with console. (See 
Console.) 


CSW. Channel Status Word 

CTC. Channel-to-channel adapter 

CVG. Character Vector Generator 

DAR. Diagnose Accessible Register 

DARM. Diagnose Accessible Register Mask 

Data Keys. These keys operate in conjunction with other 
keys and are used to provide data for subsequent storage or 


as a beginning address of a loop operation. 


Data Interleave Mode. A byte mode of input/output 
operation, which is now referred to as Multiplex mode. 


DAU. Data Adapter Unit (2701) 
DBI. Data Bus In 
DBO. Data Bus Out 


DCP. Display Channel Processor portion of NAS 
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DE. Display Element 

DESAR. Display Element Storage Address Register 
DESDR. Display Element Storage Data Register 
Destination. An addressed device or storage location. 


Device. A system component, usually an input/output 
device; includes tape units. 


DG. Display Generator 


DGAR. Display Generator Address Register (in the display 
element) 


DGDR. Display Generator Data Register (in the display 
element) 


Diagnose. An instruction used primarily by maintenance 
programs to perform functions using parts of elements not 
possible with any other computer instruction. 

Display Generator. A non-IBM unit used to drive displays. 
Diagnose Accessible Register. A register in the CE used in 
conjunction with the External Old PSW to indicate source 
of some external interruptions; can be read only with the 


Diagnose instruction. 


Diagnostic Monitor. A supervisor program which controls 
the operation of diagnostic programs. 


Diagnostic Program. A program written to determine the 
malfunctioning parts of a system component. 


Digit. A group of four bits; usually two digits to a byte. 


Display Element. An element that interfaces the CE for 
display update and DGs for display regeneration. 


DRG. Data Receiving Group 


Duplex System. Configuration containing two CEs. 
ELC. Element Check 


Element. Major system component, which also contains 
battery backup: CEs, IOCEs, DEs, and SEs. 


Element Check. An equipment malfunction detected by an 
element or unit and indicated to a CE; detectable through 
the external interrupt system. 


Element Control Panel. Controls and indicators located on 
a panel at each element and unit frame. 


ELEMENT MPO PULL. Element Master Power Off 


Element Master Power Off Pull. A pull-type switch, which 
turns power off on each of the system elements and each 
PAM and TCU where it is located; operative in any state. 


Element Numbering. Numbering scheme used to define 
physical location and order of expansion for main wall 
elements. 


Element Reset. Reset of an element’s or unit’s registers and 
controls to an initial state. 


EMERGENCY PULL. A pull switch located in the upper 
right-hand corner of the system console and configuration 
console; to be used in an emergency and to turn off power 
to all system components. 


ENABLE. A pushbutton which allows an affiliated switch 
action to take place. 


EOM. End of Message 

EPO. Emergency Power Off ° 

External Cables. Protected covered cables used to inter- 
connect normally separated elements, units, or devices. 
External cables are routed under the floor. 

External Interrupt Register. External interruptions are 
stored either in the PSW, DAR, or in the PIR; all may be 
considered external interruption registers. 

Fault Locating Tests. A fixed set of diagnostic or status 
tests used for isolation of equipment malfunctions in the 
CEs and IOCEs. 


Fetch. The action whereby data is retrieved from storage. 


FLT. Fault Locating Tests 


Frame. The mechanical housing for the electronic, mechani-_ . 


cal, and power equipment which constitutes each system 
clement, unit, and device. 


GPI. General Purpose Input adapter 
GPO. General Purpose Output adapter 


High-Order Bits. Most significant bits of word, byte, or 
group of bits. 


IA. Instruction Address 
IAR. Instruction Address Register 
IC. Instruction Counter 


IDES. Inhibit DE Stop bit. (Absence of this bit will cause 
DE to stop on any DE error.) 


ILC. Instruction Length Code 
ILOS. Inhibit Logout Stop 


Indicator. A visual indicator on a panel or console; also 
referred to as lamp or neon. 


Input/Output Control Element. The system component 
that provides the control for all system input/output 
operations and does processing under control of the CE. 

Instruction. An instruction is fetched from storage by a CE 
or IOCE and is executed by that CE or IOCE to perform a 


useful function. 


Interface. The matching of signal, data, and control lines 
between system components. 


Interlock. A hardware control which requires another 
action to be performed to make certain manual controls 
effective. 

Interruption. The stopping of processing in a CE or IOCE. 
(See 9020 System Principles of Operation Manual and 
9020D and 9020E System.) 

INTI. Interfacility Input adapter 

INTO. Interfacility Output adapter 

IOCE. Input/Output Control Element 

IOCESAB. IOCE Storage Address Bus (in the SE). 


IOCESBO. IOCE Storage Bus Out (in the SE). 


IOCE Processor. An IOCE that is processing instructions 
under control of a CE. 


IPL. Initial Program Load 
ISK. Insert Storage Key 


Keys. Hardware toggle switches, or storage protect codes. 
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Lamp. Used interchangeably with indicator. (See Indi- 
cator.) 


Lamp Test. A static test of indicators on a console, with 
exceptions noted for each panel. 


LAR. Local Store Address Register 


Latch. A hardware device capable of retaining a bit of 
information. 


LOAD. A pushbutton located on some system elements and 
on the system console and the configuration console to 
start the initial program loading sequence. 

LOAD UNIT. Rotary switches on some system elements 
and the system console; used to select an input/output 


device for the initial program loading process. 


Local Storage. A group of internal registers within a CE or 
IOCE; used for instruction execution purposes. 


Logic. The circuits provided in an element which make 
decisions concerning the data provided them. 


Logic Check. The determination that the logic is not 
performing in a correct manner; usually associated with 
incorrect parity of data. 

Logout. The storing of contents of registers and conditions 
of latches from an element into selected locations of main 
storage. 


Logwords. Words contained in a logout (32 bits). 


Low-Order Bits. Least significant bits of word, byte, or 
group of bits. 


LRC. Longitudinal Redundancy Check 

LS. Local Storage 

LSAR. Local Storage Address Register (IOCE). 
LSB. Least Significant Bit 

LSFR. Local Storage Function Register 
LSWR. Local Storage Working Register 
MACH. Maintenance and Channel Storage 


Machine Cycle. The time required to perform one micro- 
instruction. 
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MAIN STORAGE SELECT. A rotary switch on the system 
console, configuration console, and CE; used to select a 
main (not a local) storage element for initial program 
loading, FLT loading, and store/display operations. 


Main Wall Section. Joins CE and SE/DE elements into a 
contiguous wall. Contains interframe cabling and power 
components. 


Main Wall Spacer Frame. Used between two SEs or DEs 
when not separated by a CE. Interframe cabling is routed 
through this frame. 

Maintenance and Channel Storage. Storage in the IOCE 
used for Channel UCWs, IOCE processor, and maintenance 
operations. 

Maintenance Controls. Controls located on all system 
components for use by engineers responsible for main- 


taining individual or subsystem components. 


Marginal Condition. A marginal condition may be caused 
by an out-of-tolerance check or on-battery signal. 


MC. Machine Checks or Marginal Check 
MCW. Maintenance Control Word 


Micro-instruction or Micro-order. The commands stored in 
read-only storage which control CE and IOCE actions. 


Mode of Operation. Indicators which display in alphameric 
characters the operational system status on the system 
console. 

Module. A circuit package; part of the SLT technology. 
Monitor. The act of watching the display of information 
through indicators and the manipulation of operational 
controls. 

MPLX. Multiplexer 

MPDA. Modified Parallel Data Adapter 

MPO. Master Power Off. (See Element Master Power Off.) 
MSB. Most Significant Bit 


MTU. Magnetic Tape Unit 2401-2/3 


Multiplex Mode. The normal mode of operation for 
slow-speed devices; allows handling of single bytes or 
multiple bytes whenever necessary. 


Multiplexer Channel. A channel in the IOCE which operates 
in the Multiplex mode. 


NAS. National Airspace System 
NBP. Normal Bit Period 
OBS. On-Battery Signal 


On-Battery Signal. An indication from an element that it 
has lost main line or standby power and is obtaining power 
from its battery system. 


Operator Controls. Controls on the system console, config- 
uration console, and CEs which an operator may use to 
affect a CE and the system operation. 


Order. Used to specify functions peculiar to a device, such 
as rewinding tape or spacing of a printer. 


OTC. Out-of-Tolerance Check 


Out-of-Tolerance Check. An indication by temperature- 
sensing circuits that there has been an increase in internal 
temperature within approximately 10° of the thermal 
shut-down temperature. 


PAM. Peripheral Adapter Module 


Panel. An aggregation of indicators and controls; used 
interchangeably with console. 


PCI. Program Controlled Interruption. 

PDA. Parallel Data Adapter (in the 2701 DAU). 

PDU. Power Distribution Unit 

Peripheral Adapter Module. A unit in the 9020 System for 
interfacing with various input/output devices. PAM pro- 
vides the control for automatic sequential polling and 
servicing for input/output devices. 

PIR. Processor Interrupt Register 

Power Check. A power supply malfunction which results in 
an indicator display on the system component where the 


fault is located and on the system console under the 
appropriate component indication. 


Power Controls. Controls that allow the various power 
functions to be performed. 


Power Control Panel. A panel located on most system 
components which contains each component’s power 
control switches and indicators. 


Power Distribution Unit. Referred to as a power compart- 
ment; located within each system element and unit and 
some devices; contains the power supplies and power 
distribution equipment. 


POWER ON/OFF. A toggle type switch which is used, 
except when interlocked, to turn power on or off on a 
system component. 


POWER ON/OFF REMOTE Switch. A power on/off switch 
located in the power distribution unit. It can be used in 
place of the POWER ON/OFF switch. 


Power Sequence Complete. When a system component has 
successfully sequenced all its voltages to the operational 
level, the POWER SEQUENCE COMPLETE indicator is 
turned on. 


Power Wall Frame. Contains power circuitry for a related 
element. Interframe cabling is routed through this frame. 
This frame is part of main wall section. 


Preferential Storage Base Address. Address in storage which 
contains the first byte of the preferential storage area. 


Preferential Storage Address Register. A hardware register 
in the CE which contains the PSBA. 


Primary Interface. The path established between a like- 
numbered PAM and JOCE and through which the max- 
imum number of devices attached to the PAM may be 
addressed. 


Processor Interrupt Register. A three-bit register in each CE 
to preserve external interrupts from IOCE processors. 


Program Status Word. Contains information that is required 
for proper program execution. 


PSA. Preferential Storage Area 

PSBA. Preferential Storage Base Address 

PSBAR. Preferential Storage Base Address Register 
PSW. Program Status Word 

PVD. Plan View Display 


QUAD System. Configuration with four CEs. 
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RATE. A switch which allows a CE or IOCE to process 
instructions at normal processing speed or an instruction at 
a time. 

R/Console. The enroute controller’s console. 

RCU. Reconfiguration Control Unit (portion of the CC). 
Read Only Storage. A capacitor-type storage which is 
utilized in the CE and IOCE to hold the micro-instructions' 
necessary to control the element’s operations. 

Refetch. When a piece of data is fetched and an error 
indication is noted by the checking circuits, another fetch, 
a refetch, can occur. 

RKM. Radar Keyboard Multiplexer 

RKM/R-Console. RKM-to-R-console configuration switch 
ROAR. Read-Only Address Register 

ROS. Read-Only Storage 


ROS Address Stop. Causes the CE or IOCE to stop when 
the specified micro-instruction address is selected. 


ROSDR. Read-Only Storage Data Register 

ROS Repeat. A repeat of a selected micro-instruction. 
Running State. The normal machine state for processing 
instructions, referred to as the processing state and/or the 
program or supervisor state. 

RVDP. Radar Video Data ee adapter 

SAB. Storage Address Bus 

SABR. Storage Address Buffer Register 

SAR. Storage Address Register 

SBI. Storage Bus In 

SBO. Storage Bus Out 

SC. System Console 


SCI. Storage Control Interface 


Scan In. The filling of registers and triggers in an element 
with the selected contents of storage (via special paths). 
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SCON. Set Configuration Instruction and Set Configuration 
function 


SDBI. Storage Data Bus In 

SDBO. Storage Data Bus Out 

SDC. Station Directing Code 

SDR. Storage Data Register 

SE. Storage Element 

Secondary Interface. The alternate path for a PAM-IOCE 
interface through which an JOCE may address only part 
(half-secondary) or all (full-secondary) of the PAM’s 
attached devices. 

Selection Mask. The data used by the configuration control 
equipment to address the configuration control registers 
that are to be changed. 

Selective Reset. A reset signal sent to a selected adapter 
from an IOCE as a result of an error detected on the I/O 


interface. 


Selector Channel. A high-speed channel which operates 
only in the burst mode. 


SENSE Switch. A switch (one of a set) located on the 
system console and configuration console; can be used as a 
single or combination bit input. 

SESAR. Storage Element Storage Address Register. 
SESDR. Storage Element Storage Data Register 


Set Configuration. An instruction which assigns communi- 
cation paths between elements and units. 


SM. System Mask 

SMMC. System Maintenance Monitor Console 
SOBR. Storage Output Buffer Register 

SOM. Start of Message 

SPAR. Storage Protect Address Register 


SPB. Storage Protect Buffer 


SPCR. Storage Protect Compare Register 


SPDR. Storage Protect Data Register 
SPIKR. Site Protect In Key Register 
SPOKR. Storage Protect Out Key Register 
SR. Select Register 

SSK. Set Stoiave Key 


Standby Power. A standby power system for main line 
power supplied by the customer. 


STAT. A status trigger that is hardware-testable. 


START. In conjunction with the RATE switch, this 
pushbutton takes a CE or IOCE out of the stopped state. 


State. Used to define the state of a CE (stopped or wait) or 
the state or status of the operational system. 


State One. An interpretation of the state bits in the 
configuration control register; a state in which SCON may 
not be issued by a CE; some maintenance controls are 
operative. 


State Three. An interpretation of the state bits in the 
configuration control register: A state in which SCON may 
be issued by a CE; no manual controls normally operative 
in this state. 


State Two. An interpretation of the state bits in the 
configuration control register; a state in which SCON may 
not be issued by a CE; no manual controls normally 
operative in this state. 


State Zero. An interpretation of the state bits in the 
configuration control register; a state in which the TEST 
switch is operative and, therefore, all manual controls may 
be used. 


Status. The various states of all system components 
automatically displayed on the system console and config- 
uration console. 


Status Byte. A portion of the information supplied by a 
channel or I/O unit as a result of an I/O operation. 


Stop. The placing of a CE or IOCE in the stopped state 
without destroying control or register data. 


Stopped State. A machine condition where no instructions 
are executed, no interrupts are accepted, and the timer is 
not updated. Certain manual controls are operative only in 
this machine state. 


Storage. Either main or local storage registers which are 
used for storing data or programs. Read-only-storage holds 
micro-instructions only. 


Storage Cycle. The time required to read a word from, and 
regenerate the word into, main or local storage; also, the 
time to read a word from ROS. 


_ Storage Element. The main storage element of the 9020D/E 


System, which contains 131K words of addressable storage. 


Storage Key. Four bits placed in the storage protect buffer 
which are specified by the program and which protect a 
block of 2048 bytes. 


Storage Protection. The protection of selected parts of an 
SE, accomplished through programming and hardware 
means, to prevent destruction of important data. 


Storage Protect Buffer. A 64-word storage used to hold the 
storage protect keys. 


Storage Protect Key. Used interchangeably with storage 
key. 


STORAGE SELECT. The two-position switch that allows 
the addressing of main or local storage. 


‘STORAGE TEST. A_ switch on IOCEs which allows 


hardware testing of the element’s internal storage. 


Store. To replace the contents of an addressable storage 
location. 


SU. Switch Unit 


Switchable Indicators. Indicators on the CE and IOCE 
control panels which can be manually switched to one of 
several different positions in which different registers or 
functions are displayed. 


System Components. Elements - CEs, IOCEs, DEs, and SEs; 
Units - PAMs, Tape Control Units, 2821 Control Unit, 2701 
Data Adapter Unit, System Console, Configuration Con- 
sole; Devices - Tape Units, 1052s, Printer, Card Reader 
Punch, and other I/O devices. 


System Console. The main system monitor and control 
location. 


System Control. The function of controlling system 
components through programming and manual operations, 
using configuration control, element checking, and the 
executive control program. 
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System Interlock. A key-operated switch which, when in 
the normally “off position, prevents certain manual 
controls from being operative (which might jeopardize 
system operation). 


System Reset. A signal which resets system components to 
their initial state. 


TCU. Tape Control Unit 


Tape Control Unit. The system unit which controls the 
operation of up to eight tape units. Each tape control unit 
may be selected through one of two IOCEs only. 


Thermal Condition. Over-temperature condition for a 
system element or unit. 


TPS. Two-Processor Switch 


Triplex System. Configuration containing three CEs. 


TU. Tape Unit 
UCW. Unit Control Word 
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Unit. System components which operate mainly as I/O 
device control units; PAMs, DAUs, Tape Control Units, 
2821 (Printer, Card Reader/Punch) Control Unit. Also, the 
system console and configuration console are classified as 
units. 


Unit Control Word. An aggregation of information about a 
device and control unit; maintained and used by the 
multiplexer channel in an IOCE; not available to the 
programmer. 


VEL. Variable Field Length 
Wait State. A machine state wherein instructions are not 


executed, unmasked interruptions are accepted, and the 
timer is updated. 


XIC. Transmission Interface Converter 
9020D. IBM System for the Central Computer Complex. 


9020E. IBM System for the Display Channel Processor. 


Abnormal! Conditions: 
CCR Parity Check 7-8 
General 8-1 
Marginal Temperature 7-7 
On Battery Signal 7-8 
Power Supply 7-7 
Signals 6-10 
Address Translation: 
Examples 5-16 
General 5-1, 5-11 
Logical versus Physical Addresses -5-11 
Normal Accesses 5-11 
PSA Accesses 5-12 
Address Translation Register: 
General 5-1, 5-11, 5-12 
Slots 5-13 
Addressing Scheme, SE 5-4 
Air Traffic Control, Introduction 1-1 
Alternate Latch 8-11 
Alternate PSA 8-5 
ATC (see Air Traffic Control) 
ATR (see Address Translation Register) 


Backup Power 1-2 

Basic Storage Modules 5-4 
Battery Backup 1-2 

BSM (see Basic Storage Modules) 
BusIn 3-38 

Bus Out 3-38 

Buses, Standard I/O 3-38 

Byte Stats (IOCE Marks) 3-26 


Cables 3-1 
CC (see Configuration Console) 
CCC (see Central Computer Complex) 
CCR (see Configuration Control Register) 
CCR Parity Check 7-8 
CE (see Computing Element) 
CE Own OTC, OBS’ 8-11 
Central Computer Complex 1-1 
Channel Interface (see also Data Adapter Unit) 2-23 
Channel-to-Channel Adapter 2-8, 2-9 (Fig. 2-6) 
Channels: 
Function 1-5 
360 Mode Operation B-1 
Character Vector Generator 1-4 
Checkstop 7-9 
CHIF (see Channel Interface) 
CLU (see Common Logic Unit) 


Common Logic Unit (see also I/O Control Element) 2-8 


Common Logic Unit (CLU) Logout 8-3 
Communication Bits in CCR 4-8 
Communication Fields in CCR 4-8 
Computing Element: 

Address Translation 2-4 

Control 2-4 

Description 2-1 

Direct Control Commands 6-1 

Error Handling 8-6 

External Interface 2-6 


Function 1-3 
Instruction Execution Logic 2-5 
Instruction Fetch and Operand Prefetch 2-4 
Interfacing Description 2-1, 2-2 (Fig. 2-1), 3-1 
Internal Organization 2-4 
Interrupt Actions 6-8 (Fig. 6-5) 
Interruptions and Exceptional Conditions 2-46 
Logout 8-3 
Manual Controls and Maintenance Features 2-6 
Storage Control Interface 2-4 
Configuration Console: 
Description 2-18 
Interfacing 3-34, 3-35 (Fig. 3-19) 
Reconfiguration Function 2-20 
System Console Function 2-20 
Configuration Control: 
Examples 4-9 
Introduction 4-1 
Isolation of Malfunctioning Elements 4-9 
RCU 41 
SCON 4-1 
Configuration Control Register: 
Communication Fields 4-8 
Description 4-5 
IDES Field 4-8 
ILOS Field in CE and IOCE 4-8 
SCON Field 4-7 
Configuration Interface 3-36, (Fig. 3-20) 3-60 
Configuration Mask 4-2 
Control Bus: 
CE-CE 3-5 
CEtoIOCE 3-17 
Control Program 1-3 
CVG (see Character Vector Generator) 


DAR (see Diagnose Accessible Register) 
DARM (see Diagnose Accessible Register Mask) 
Data Adapter Unit: 
Channel Interface 2-23 
Description 2-22 
Error Handling 8-30, 8-32 (Fig. 8-16) 
Interfacing 3-31 
Internal Organization 2-23 
Modified Parallel Data Adapter 2-23 
Transmission Interface Converter 2-23 
Two-Processor Switch 2-23 


INDEX 


Data, Address, Keys In Bus (Output Bus) 3-24, 3-25 (Fig. 3-14) 
Data Bus Out (IOCE Input Bus) 3-26, 3-27 (Fig. 3-15) 


DAU (see Data Adapter Unit) 
DCP (see Display Channel Processor) 
DE (see Display Element) 
Defeat Interleaving: 
Effect on IOCE Accesses 5-9 
No Storage Reverse 5-9 
Storage Reverse 5-9 
Delay Instruction 6-13 
DG (see Display Generator) 
Diagnose Accessible Register: 
General 7-6 
Interrupts 6-10 
Mask 7-6 
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Direct Control: 
Bus 3-5 
Example 6-4 
External Interrupts 6-10 
General 6-1 
360 Mode Operation B-1 
Direct Control Commands: 
IOCE-Processor Interrupt 6-3 
IOCE-Processor Start 6-3 
IOCE-Processor Stop 6-3 
Display Channel Processor 1-6, 1-7 (Fig. 1-4) 
Display Element: 
Addressing 5-9 
Description 2-14 
Display Storage Section 2-17 
Error Handling 8-25, 8-26 (Fig. 8-12) 
Function 1-4 
Interfacing 3-29 
Internal Organization 2-17 
Logout 84 
Storage Addressing 2-16 
Storage Protection 2-16 
Switch Unit 2-17 
Wrap Bus 3-14 
Display Generator: 
Configuration Interface 3-36 (Fig. 3-20) 
Function 1-4 
Display Storage (see Display Element) 
Distributed Simplex Interface Lines 3-1 
Drivers, Interface 3-1 


ELC (see. Element Check) 
Element Check: 
General 7-2 
Generated by CE 6-7 
Generated by IOCE 6-7 
Element State 4-5 
Error Handling: 
CE: 
DE Access Response Errors 8-11, 8-13 (Fig. 8-4) 
Error Monitoring during Logout 8-11, 8-14 (Fig. 8-5) 
General 8-6 
Internal Abnormal Conditions 8-11, 8-15 (Fig. 8-6) 
Logic Checks 8-6, 8-7 (Fig. 8-2) 
SE Access Response Errors 8-6, 8-9 (Fig. 8-3) 
DAU _ 8-30, 8-32 (Fig. 8-16) 
DE 8-25, 8-26 (Fig. 8-12) 
IOCE: 
Abnormal Conditions 8-21, 8-23 (Fig. 8-10) 
CLU Errors 8-11, 8-17 (Fig. 8-7) 
SE Access Response Errors 8-16, 8-19 (Fig. 8-8) 
Selector Channel Errors 8-18, 8-22 (Fig. 8-9) 
RCU_ 8-28, 8-29 (Fig. 8-14), 8-31 (Fig. 8-15) 
SE 8-21, 8-24, (Fig. 8-11) 
TCU 8-25, 8-27 (Fig. 8-13) 
Error Recording 8-1 
EXC (see Executive Control Program) 
Executive Control Program 1-3 
External Interrupts: 
Console Interrupt 6-9 
DAR 6-10 
Direct Control 6-10 
General 7-4 
Handling Fig. 7-3 
PIR 6-9 
Timer Interrupt 6-9 
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External Logic Errors 8-1 
External Stop, Direct Control 6-3 


Fail-Safe, Fail-Soft 1-2 
Fetch Protection 5-1 


IATR (see Insert Address Translator) 
Identifiers, Storage 5-13, 5-14 (Fig. 5-11) 
IDES (see Inhibit Display Element Stop) 
ILOS (see Inhibit Logout Stop) 


Inhibit Display Element Stop 4-8 


Inhibit Logout Stop: 
General 4-8 
360 Mode Operation B-1 
Initial Program Load: 
Subsystem 9-3 
System 9-3 
360 Mode B-l 
Initialization, System 9-1 
Input Bus (IOCE Data Bus Out) 3-26, 3-27 (Fig. 3-15) 
Input/Output Interrupts 6-11 
Insert Address Translator 5-15 
Instruction, Comparative Listing A-1 
Interelement Signal Lines 7-2 
Interface Drivers and Receivers 3-1 
Interface Lines: 
CC-to-CE 3-22, 3-23 (Fig. 3-13) 
CC-to-SMMC_ 3-37 
CE-to-CC 3-20, 3-21 (Fig. 3-12) 
CE-to-CE 3-5, 3-6 (Fig. 3-4) 
CE-to-DE 3-11, 3-12 (Fig. 3-7) 
CE-to-IOCE 3-17 (Fig. 3-9) 
CE-to-SE 3-7, 3-8 (Fig. 3-5) 
CE-to-TCU 3-19, 3-20 (Fig. 3-11) 
DAU-to-RKM 3-33 (Fig. 3-18) 
DE-to-CE 3-13, 3-14 (Fig. 3-8) 
DG and RKM Configuration Interface 3-36 (Fig. 3-20) 
General 3-1 
IOCE-to-CE 3-18 (Fig. 3-10) 
IOCE-to-SE 3-24, 3-25 (Fig. 3-14) 
RKM-to-DAU 3-33 
SE-to-CE ‘3-9, 3-10 (Fig. 3-6) 
SE-to-IOCE 3-26, 3-27 (Fig. 3-15) 
TCU-to-CE 3-19, 3-20 (Fig. 3-11) 
Types 3-1, 3-2 (Fig. 3-1) 
Interface Switch Feature (TCU) 2-24 
Interfacing: 
CC-SMMC_ 3-37 (Fig. 3-21) 
CE-CC 3-20 
CE-CE 3-5 
CE-DE 3-11 
CE-IOCE 3-15 
CE-SE 3-7 
CE-TCU 3-19 
Configuration Console 3-34, 3-35 (Fig. 3-19) 
DAU 3-30, 3-31 (Fig. 3-16) 
DAU-CC 3-31 
DAU-IOCE 3-31 
DAU-RKM 3-32 (Fig. 3-17) 
DE 3-29 
DE-CC 3-30 
DE-DG 3-29 
IOCE-CC 3-28 
IOCE-SE 3-24 
Overall 3-40, 3-41 (Fig. 3-23) 


SE 3-29 
Standard I/O 3-38 
TCU 3-30 
1052 Adapter-1052 3-36, 3-39 (Fig. 3-22) 
Internal Logic Errors 8-1 
Interruption Code, 360 Mode B-! 
Interruptions, Normal and Abnormal 7-5 
Interrupts: 
External 6-9, 7-4 
Input/Output 6-11 
Introduction 6-6 
Masking 6-6 
Program 6-7 
Supervisor Call 6-9 
Invalid Op Codes, 360 Mode _B-1 (Fig. B-1) 
1/0 (see Input/Output) 
I/O Control Element: 
Description 2-7 
Direct Control Logout 6-2 
Direct Control Processor Interrupt 6-3 
Direct Control Processor Start 6-3 
Direct Control Processor Stop 6-3 
Error Handling 8-11 
Function 1-5 
Interfacing 3-24 
Internal Organization 2-8, 2-10 (Fig. 2-7) 
I/O Operations 2-11 
Logout 8-3 
Machine Check Interruption Requests 6-7 
Machine Checks 6-7 
PSBAR 5-31 
I/O Interface, Standard 3-38 
I/O Operations (see I/O Control Element) 
I/O Processor (see IOCE-Processor) 
IOCE (see I/O Control Element) 
IOCE Marks (Byte Stats) 3-26 
IOCE-Processor: 
General 2-11 
Interrupt Action 6-11, 6-12 (Fig. 6-8) 
PSW_ 6-11 
360 Mode B-1 
IPL (see. Initial Program Load) 


Key, Storage Protection 5-1 


Load PSBA Instruction 5-27 
Log Address Check 8-11 
Log ROS Check 8-11 
Logic Check 7-9 
Logic Errors, Internal and External 8-1 
Logical Addresses 5-11 
Logical PSBAR 5-24 
Logout: 
CE 8-3 
DE 8-4 
Introduction 7-2 
IOCE 8-3 
Locations 8-2 (Fig. 8-1) 
SE 8-4 
Selector Channel 8-4 
Split 8-5 
Stop 8-4, 8-5 
Logout IOCE, Direct Control 6-3 
LOS (see Logout Stop) 
LPSB (see Load PSBA Instruction) 


MACH (see Maintenance and Channel Storage) 
Machine Check Interrupts: 

CE 6-7 

IOCE 6-7 

Resulting from Read-direct Timeout 6-7 


Maintenance and Channel Storage (see. also I/O Control 


Element) 2-10, 5-2 


Malfunction Handling (see also Error Handling) 8-1 


Marginal Temperature Abnormal Conditions 
Mark Bus: 

DE 3-11 

SE 3-7 
Modified Parallel Data Adapter 2-23 
Monitor Program 1-3 


Monitoring, System (see also System Monitoring) 7-1 


MPDA (see Modified Parallel Data Adapter) 
MPX (see Multiplexer Channel) 
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Multiple Driver-Multiple Receiver Interface Lines 


Multiple Driver Simplex Interface Lines 3-1 
Multiplex Interface Lines 3-1 
Multiplexer Channel: 

Description 2-10 

Function 1-5 
Multiprocessing 1-6, 6-1 
Multiprogramming 6-1 
Multisystem 6-1 


Multisystem Operation, Effect of Reconfiguration 6-13 


NAS (see National Airspace System) 
National Airspace System 1-1 


OBS (see On-Battery Signal) 

On-Battery Signal 6-10, 7-2, 7-8 

OTC (see Out of Tolerance Check) 

Out of Tolerance Check 6-10, 7-2, 7-7 
Output Bus (Data, Address, Keys In Bus) 


Patch Panel, 1052 2-20 
Physical Addresses 5-11 
Physical PSBAR 5-24 
PIR (see Processor Interrupt Register) 
Plan View Displays 1-4 
Plugcards 5-13 
Power Supply Abnormal Conditions 7-7 
Preferential Storage Area: 
Examples 5-29, 5-30 
General 5-23 
Logout Locations 8-2 (Fig. 8-1) 
Permanent Assignments 6-6 (Fig. 6-4) 
Preferential Storage Base Address 5-23 
Preferential Storage Base Address Register: 
General 5-2, 5-12 
IOCE 5-29 
Logical 5-24 
Operation 5-23 
Operational Characteristics 5-28 
Physical 5-24 
PSBAR Counter 5-26 
Stepping 5-26 
360 Mode Operation B-1 
Processor Interrupts 6-9 
Program Interruptions 6-7 
CE 6-6 
IOCE 6-11, Fig. 6-7 
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Protection, Fetch 5-1 

Protection, Storage 5-1 

PSA (see Preferential Storage Area) 

PSA Lockout 8-16 

PSA Lockout, 360 Mode B-1 

PSBA (see Preferential Storage Base Address) 
PSBAR (see Preferential Storage Base Address Register) 
PSBAR Counter 5-26 

PSBAR Not Configured Latch 8-6 

Pseudo SCON 9-3 

PSW (see Program Status Word) 

PSW Restart 9-3 

PVD (see Plan View Display) 


Radar Data, Processing of 1-4, 1-5 (Fig. 1-3) 


Radar Keyboard Multiplexer Configuration Interface 3-36 


(Fig. 3-20) 
RCU (see Reconfiguration Control Unit) 
Read Direct Instruction 6-3 
Read-Direct Timeout 6-7 
Receivers, Interface 3-1 
Reconfiguration Control Unit: 


Error Handling 8-28, 8-29 (Fig. 8-14), 8-31 (Fig. 8-15) 


General 2-18 


Reconfiguration, Effect on Multisystem Operation 6-1, 6-13 


Recording of Errors 8-1 
Redundancy 1-3 
Redundant Elements 1-3 
Re-entrant coding 6-1 
Resets: 
Subsystem 9-1 
System 9-1 
RKM (see Radar Keyboard Multiplexer) 
ROS (see Read-Only Storage) 
RRD (see Read Direct Instruction) 


SAB (see Storage Address Bus) 
SABR_ 5-3 
SATR (see Set Address Translator) 
SCCU (see System Console Control Unit) 
SCI (see Storage Control Interface) 
SCON (see also Set Configuration) 4-2 
SCON Field 4-7 
SE (see Storage Element) 
SE Stopped: 

360 Mode B-1 

9020 Mode _ 8-6, 8-18 
SEL (see Selector Channel) 
Selection Mask 4-2, 5-14 
Selector Channel: 

Description 2-11 

Function 1-5 

Logout 8-4 
Sense Command 8-5 
Set Address Translator 5-14 
Set Configuration Instruction 4-2 
7201-02 (see Computing Element) 
7231-02 (see I/O Control Element) 
7251-09 (see Storage Element) 
7265-03 (see Configuration Console) 
7289-04 (see Display Element) 
Shared Storage 6-11 
Signal Lines, System Monitoring 7-2 
Signals, Abnormal Condition 6-10 
Simplex Interface Lines 3-1 
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Slots, ATR 5-13 

SMMC (see System Maintenance Monitor Console) 
Split Logout 8-5 

SPSB (see Store PSBA Instruction) 

SSU (seg-Storage*Switching Unit) 


Standard I/O Interface 3-38 


State 1-3 
State, Element 4-5 
State One 4-6 
State Three 4-6 
State Two 4-6 
State Zero 4-6 
Stepping of PSBAR 5-26 
Storage Address Buffer Register 5-3 
Storage Address Bus: 
DE 3-11 
SE 3-7 
Storage Address Ranges 5-2 (Fig. 5-1) 
Storage Addressing: 
Address Translation 5-11 
CE Accesses 5-4 
CE and IOCE Differences 5-3 
Display Elements 5-9 
Formats 5-3 (Fig. 5-2) 
General 5-1 
IOCE Accesses 5-4 
Storage Elements 5-3 
Storage Control Interface 2-4 
Storage Data Bus In: 
DE 3-11 
SE 3-7 
Storage Data Bus Out: 
DE 3-14 
SE 3-10 
Storage Element: 
Addressing Scheme 5-4 
Description 2-12 
Error Handling 8-21, 8-24 (Fig. 8-11) 
Function 1-4 
Interfacing 3-29 
Internal Organization 2-13 
Logout 8-4 
Storage Addressing 2-13 
Storage Protection 2-13 
Storage Section 2-14 
Storage Switching Unit 2-13 
Storage Identifiers 5-13, 5-14 (Fig. 5-11) 
Storage Interleaving 5-5 
Storage Protection 5-1, B-1 
Storage, Shared 6-11 
Storage Switching Unit (see also Storage Element) 2-13 
Store PSBA Instruction 5-28 
SU (see Switch Unit) 
Subsystem: 
IPL 9-3 
PSU Restart 9-3 
Reset 9-1 
Supervisor Call Interrupts 6-9 
Supervisor Program 1-3 
Switch Unit (see also Display Element) 2-17 
System: 
IPL 9-3 
PSW Restart 9-3 
System Console Control Unit 2-18 
System Initialization 9-1 
System Interlock 9-1, 9-3 


System Maintenance Monitor Console 2-20 
System Monitoring: 

External Interruption 7-4 

Interelement Signal Lines 7-2 

Logout 7-2 

Overall Operation 7-1 

Program and Hardware 7-1 


Tape Control Unit: 
Connection to IOCEs 2-25 (Fig. 2-20) 
Description 2-24 
Error Handling 8-25, 8-27 (Fig. 8-13) 
Interface Switch Feature 2-24, 2-25 (Fig. 2-21) 
Interfacing 3-30 
TCU (see Tape Control Unit) 
1050 Adapter - 1052 Interface 3-36, 3-39 (Fig. 3-22) 
1052 I/O Printer/Keyboard 2-20 
Test and Set Instruction: 
Description 6-13 
Example 6-13 
360 Mode B-1 
TPS (see Two Processor Switch) 
Transmission Interface Converter (see also Data Adapter 
Unit) 2-23 
TU (see Tape Unit) 
2803-01 (see Tape Control Unit) 
2701-01 (see Data Adapter Unit) 
Two Processor Switch (see also Data Adapter Unit) 
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Weather Data 1-4, 1-5 (Fig. 1-3) 


Wrap Bus 3-14 


WRD (see Write Direct Instruction) 


Write Direct Commands: 
CE External Start 6-2 
CE External Stop 6-3 
CE Logout 6-2 
Data Communication 6-2 
IOCE Logout 6-3 

Write Direct Instruction: 
Executed by CE 6-1 
Executed by IOCE-Processor 


6-4 


XIC (see Transmission Interface Converter) 


360 Mode B-1 
1052 Adapter - 1052 Interface 


3-36, 3-39 (Fig. 3-22) 


1052 I/O Printer/Keyboard 2-20 


2701-01 (see Data Adapter Unit) 
2803-01 (see Tape Control Unit) 


7201-02 (see Computing Element) 
7231-02 (see I/O Control Element) 


7251-09 (see Storage Element) 
7265-03 (see Configuration Cons 
7289-04 (see Display Element) 
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